
Sign up to save your podcasts
Or


00:00
Welcome to the Oracle University Podcast, the first stop on your cloud journey. During this series of informative podcasts, we'll bring you foundational training on the most popular Oracle technologies. Let's get started!
00:26
Lois: Hello and welcome to the Oracle University Podcast! I'm Lois Houston, Director of Communications and Adoption Programs with Customer Success Services, and with me is Nikita Abraham, Team Lead: Editorial Services with Oracle University.
Nikita: Hi everyone! Today, we're beginning a brand-new season, this time on Oracle AI Vector Search. Whether you're new to vector searches or you've already been experimenting with AI and data, this episode will help you understand why Oracle's approach is such a game-changer.
Lois: To make sure we're all starting from the same place, here's a quick overview. Oracle AI Vector Search lets you go beyond traditional database searches. Not only can you find data based on specific attribute values or keywords, but you can also search by meaning, using the semantics of your data, which opens up a whole new world of possibilities.
01:20
Nikita: That's right, Lois. And guiding us through this episode is Senior Principal APEX & Apps Dev Instructor Brent Dayley. Hi Brent! What's unique about Oracle's approach to vector search? What are the big benefits?
Brent: Now one of the biggest benefits of Oracle AI Vector Search is that semantic search on unstructured data can be combined with relational search on business data, all in one single system. This is very powerful, and also a lot more effective because you don't need to add a specialized vector database. And this eliminates the pain of data fragmentation between multiple systems.
It also supports Retrieval Augmented Generation, also known as RAG. Now this is a breakthrough generative AI technique that combines large language models and private business data. And this allows you to deliver responses to natural language questions. RAG provides higher accuracy and avoids having to expose private data by including it in the large language model training data.
02:41
Lois: OK, and can you explain what the new VECTOR data type is?
Brent: So, this data type was introduced in Oracle Database 23ai. And it allows you to store vector embeddings alongside other business data.
Now, the vector data type allows a foundation to store vector embeddings. This allows you to store your business data in the database alongside your unstructured data, and allows you to use those in your queries. So it allows you to apply semantic queries on business data.
03:24
Lois: For many of our listeners, "vector embeddings" might be a new term. Can you explain what vector embeddings are?
Brent: Vector embeddings are mathematical representations of data points. They assign mathematical representations based on meaning and context of your unstructured data.
You have to generate vector embeddings from your unstructured data either outside or within the Oracle Database. In order to get vector embeddings, you can either use ONNX embedding machine learning models or access third-party REST APIs.
Embeddings can be used to represent almost any type of data, including text, audio, or visual such as pictures. And they are used in proximity searches.
04:19
Nikita: Now, searching with these embeddings isn't about looking for exact matches like traditional search, right? This is more about meaning and similarity, even when the words or images differ? Brent, how does similarity search work in this context?
Brent: So vector data is usually unevenly distributed and clustered. Vector data tends to be unevenly distributed and clustered into groups that are semantically related. Doing a similarity search based on a given query vector is equivalent to retrieving the k nearest vectors to your query vector in your vector space.
What this means is that basically you need to find an ordered list of vectors by ranking them, where the first row is the closest or most similar vector to the query vector. The second row in the list would be the second closest vector to the query vector, and so on, depending on your data set. What we need to do is to find the relative order of distances. And that's really what matters rather than the actual distance.
Now, similarity searches tend to get data from one or more clusters, depending on the value of the query vector and the fetch size. Approximate searches using vector indexes can limit the searches to specific clusters. Exact searches visit vectors across all clusters.
05:51
Lois: Let's talk about how we actually convert information into these vectors. There are models behind the scenes, right? Kind of like translators between words, images, and numbers. Brent, what embedding models does Oracle support, and how do they handle different data types?
Brent: Vector embedding models allow you to assign meaning to what a word, or a sentence, or the pixels in an image, or perhaps audio. What that actually means? It allows you to quantify features or dimensions.
Most modern vector embeddings use a transformer model. Bear in mind that convolutional neural networks can also be used. Depending on the type of your data, you can use different pretrained open-source models to create vector embeddings. As an example, for textual data, sentence transformers can transform words, sentences, or paragraphs into vector embeddings.
For visual data, you can use residual network, also known as ResNet, to generate vector embeddings. You can also use visual spectrogram representation for audio data. And that allows us to use the audio data to fall back into the visual data case. Now, these can also be based on your own data set. Each model also determines the number of dimensions for your vectors.
As an example, Cohere's embedding model, embed English version 3.0, has 1,024 dimensions. Open AI's embedding model, text-embedding-3-large, has 3,072 dimensions.
07:45
Nikita: For organizations ready to put this into practice, there's the question of how to get the models up and running inside Oracle Database. Can you walk us through how these models are brought into Oracle Database?
Brent: Although you can generate vector embeddings outside the Oracle Database using pre-trained open-source embeddings or your own embedding models, you also have the option of doing those within the Oracle Database. In order to use those within the Oracle Database, you need to use models that are compatible with the Open Neural Network Exchange Standard, or ONNX, also known as onn-ex.
Oracle Database implements an ONNX runtime directly within the database, and this is going to allow you to generate vector embeddings directly inside the Oracle Database using SQL.
08:41
AI is transforming every industry. So, it's no wonder that AI skills are the most sought-after by employers. If you're ready to dive into AI, check out the OCI AI Foundations training and certification that's available for free! It's the perfect starting point to build your AI knowledge. Head over to mylearn.oracle.com to kickstart your AI journey today!
09:06
Nikita: Welcome back! Let's make this practical. Imagine I'm setting this up for the first time. What are the big steps? Can you walk us through the end-to-end workflow using Oracle AI Vector Search?
Brent: Generate vector embeddings from your data, either outside the database or within the database. Now, embeddings are a mathematical representation of what your data meaning is. So, what does this long sentence mean, for instance? What are the main keywords out of it?
You can also generate embeddings not only on your typical string type of data, but you can also generate embeddings on other types of data, such as pictures or perhaps maybe audio wavelengths.
Maybe we want to convert text strings to embeddings or convert files into text. And then from text, maybe we can chunk that up into smaller chunks and then generate embeddings on those chunks. Maybe we want to convert files to embeddings, or maybe we want to use embeddings for end-to-end search.
Now you have to generate vector embeddings from your unstructured data, as we mentioned, either outside or within the Oracle Database. You can either use the ONNX embedding machine learning models or you can access third-party REST APIs.
You can import pretrained models in ONNX format for vector generation within the database. You can download pretrained embedding machine learning models, convert them into the ONNX format if they are not already in that format. Then you can import those models into the Oracle Database and generate vector embeddings from your data within the database.
Oracle also allows you to convert pre-trained models to the ONNX format using Oracle machine learning for Python. This enables the use of text transformers from different companies.
11:36
Nikita: Once those embeddings are generated, what's the next step?
Brent: Store vector embeddings. So you can create one or more columns of the vector data type in your standard relational data tables. You can also store those in secondary tables that are related to the primary tables using primary key foreign key relationships.
You can store vector embeddings on structured data and relational business data in the Oracle Database. You do store the resulting vector embeddings and associated unstructured data with your relational business data inside the Oracle Database.
12:17
Lois: And when do vector indexes come into play?
Brent: Now you may want to create vector indexes in the event that you have huge vector spaces. This is an optional step, but this is beneficial for running similarity searches over those huge vector spaces.
12:38
Nikita: Now, once all of that is in place, how do users perform similarity searches?
Brent: So once you have generated the vector embeddings and stored those vector embeddings and possibly created the vector indexes, you can then query your data with similarity searches. This allows for native SQL operations and allows you to combine similarity searches with relational searches in order to retrieve relevant data.
So let's take a look at the combined complete workflow. Step number one, generate the vector embeddings from your unstructured data. Step number two, store the vector embeddings. Step number three, create vector indexes. And step number four, combine similarity and keyword searches.
Now there is another optional step. You could generate a prompt and send it to a large language model for a full RAG inference. You can use the similarity search results to generate a prompt and send it to your generative large language model in order to complete your RAG pipeline.
14:07
Lois: Thanks for that detailed walk-through, Brent. To sum up, today we introduced Oracle AI Vector Search, discussed its core concepts, data types, embedding models, and the complete workflow you'll use to get real value out of your business data, securely and efficiently.
Nikita: If you want to learn more about the topics we discussed today, go to mylearn.oracle.com and search for the Oracle AI Vector Search Fundamentals course. And if you're feeling inspired to try this out for yourself, don't forget to check out the Oracle Database 23ai SQL Workshop for hands-on training. Until next time, this is Nikita Abraham…
Lois: And Lois Houston, signing off!
14:49
That's all for this episode of the Oracle University Podcast. If you enjoyed listening, please click Subscribe to get all the latest episodes. We'd also love it if you would take a moment to rate and review us on your podcast app. See you again on the next episode of the Oracle University Podcast.
00:00
Welcome to the Oracle University Podcast, the first stop on your cloud journey. During this series of informative podcasts, we'll bring you foundational training on the most popular Oracle technologies. Let's get started!
00:26
Lois: Hello and welcome to the Oracle University Podcast! I'm Lois Houston, Director of Communications and Adoption Programs with Customer Success Services, and with me is Nikita Abraham, Team Lead: Editorial Services with Oracle University.
Nikita: Hi everyone! Today's episode is on the Oracle Analytics AI Assistant, which is all about making business data accessible and useful, no matter your background. Whether you're a seasoned pro or just starting out with Oracle Analytics, you'll want to stick around for this episode because we're covering everything you need to know to unlock powerful, intuitive, and secure data insights.
01:06
Lois: That's right. And full disclosure before we start. We're trying something a little different for this episode. Instead of a live guest, our expert will be an AI-generated voice sharing insights drawn directly from Oracle's official course materials. Think of it as getting a taste of what our training courses are like, with a little help from AI. So, with that, let's kick things off by taking a closer look at what the Oracle Analytics AI Assistant really is.
Expert: The Oracle Analytics AI Assistant is an AI-powered tool that provides a conversational interface for data analysis. With this tool, data exploration becomes more intuitive and efficient, helping you access fast, personalized insights. The AI Assistant makes use of Generative AI to process queries, analyze indexed datasets, and create or refine relevant visualizations. It is fully integrated into the Oracle Analytics platform, complementing existing analytic and visualization capabilities.
02:13
Nikita: So, put simply, users have the ability to interact with their data in plain English and receive immediate, visual answers.
Expert: Exactly! You can ask natural language questions, such as, "What were my sales in the United States last Tuesday?" or "Show me monthly sales for this year," and the assistant interprets the question, queries the right data, and generates the best visualization.
02:39
Lois: Before we dive deeper, let's ground ourselves in some of the core concepts behind this technology. Here's an overview of the AI technologies powering the assistant.
Expert:
- Artificial Intelligence refers to systems or machines that perform tasks which typically require human intelligence, like reasoning, learning, perception, and language understanding. - Large Language Models or LLMs are AI programs trained on very large data sets. LLMs can generate human-like language and perform complex language tasks, such as writing emails or answering questions. - Generative AI is a branch of AI that can create new content, such as text, images, and audio. GenAI includes chatbots and virtual assistants capable of human-like conversations, answering questions, and creating content based on user prompts. - Natural Language Processing or NLP is a subfield of AI, targeting how computers understand and generate human language.
03:42
Lois: Now, let's look at what happens behind the scenes when someone interacts with the Oracle Analytics AI Assistant.
Expert: Here is how the process works. You ask a question or make a request in natural language. Oracle Analytics Cloud identifies the most relevant dataset to answer that question, looking at metadata and attribute values. The platform prepares a prompt for the LLM that includes dataset metadata, column names, synonyms, and your question. The LLM and Natural Language Understanding interpret the question, and then translate it into a structured query. Oracle Analytics validates this query against your data model, and then queries your database.
Based on the results, the AI Assistant creates the most appropriate visualization, like a chart, table, or similar format, and provides additional natural language insights.
04:36
Nikita: Security and privacy are top priorities for organizations using tools like this, so let's get into Oracle's approach to protecting user data.
Expert: At Oracle, your data privacy and security are always top priorities. Specifically, your data is never shared with external model providers or other customers. Pre-trained generative AI models are accessed exclusively within Oracle's secure cloud infrastructure. No customer data is stored or retained by the AI models after processing, and prompt data is not used to train the models. And finally, all data processed is fully isolated and never combined or visible to anyone outside your organization.
05:20
Lois: In other words, users always remain in full control of their own data, with no risk of leakage or exposure to outside parties.
Nikita: Yeah, this kind of reassurance is absolutely critical for enterprises.
05:32
Lois: That's right, Niki. Next, let's cover how to get the most accurate and relevant insights from the AI Assistant by following some best practices for prompting.
Expert: To get the best answers, you need to be specific. Include key data points, timeframes, or filters. For example, something like: "Show total sales by country for Q2 2024." Keep questions focused, clear, and concise. Refine your request as needed. If you want different details or a simpler trend line, follow up with something like, "Show by quarter," or "Replace product category with customer segment." Avoid complex prompts, like highly nested or multi-step ones. Ask a series of concise questions instead. When typing column names or field values, pause briefly to let the Assistant suggest the correct field. This increases prompt accuracy. Consider the context of the conversation. Filters and refinements made in previous messages persist, so be aware that context builds over the conversation unless reset.
06:36
Nikita: So, you might start with something like, "Show me sales trends for the last 5 years," and then get more granular, like, "Include only technology products," or "Break the results down by product sub-category."
Lois: But sometimes, you may just want to start from scratch, so let's discuss how you can reset your session with the AI Assistant.
Expert: Just select the "Clear Assistant History" option and you can begin a new analysis.
07:03
Nikita: Language capabilities are another important consideration, so here's an overview of which languages the Assistant currently supports.
Expert: Right now, English is the primary language supported. Simple questions in other languages may work, but with less accuracy and fewer features. Talk to your Oracle Analytics administrator if you have multilingual needs.
07:26
Lois: Let's clarify what kinds of questions are beyond the scope of the Assistant.
Expert: The Assistant is built for business-oriented, goal-driven queries, not for technical schema questions or database logic. So, don't ask about dataset structures or technical metadata. But do ask about trends, comparisons, breakdowns, and summaries that relate to your business.
07:53
Do you want to fast-track your learning goals? Join us for live events hosted by Oracle expert instructors! Get certification exam tips, learn about new technology, and ask your questions in real time. Take charge of your learning. Visit mylearn.oracle.com and join a live event today!
08:13
Nikita: Welcome back! Now, let's discuss why configuring datasets is crucial for working effectively with the AI Assistant.
Expert: Effectively indexing and configuring your dataset can make a huge difference when working with the AI Assistant. When you index a dataset, you're basically creating searchable references. This makes it easier for the AI Assistant to quickly locate the most relevant columns and give accurate responses to natural language questions.
It's important to know that you'll need to manually select which columns to index. For example, if your users are likely to ask about sales in the United States, you'll want to make sure that both the "Country" column and the "Sales" column are included when indexing. That way, the Assistant knows exactly where to look when someone asks a question about U.S. sales figures.
Another thing to remember is that you can make your analytics more user-friendly by resolving ambiguities and assigning synonyms to your dataset columns. For instance, if there's a generic "date" column, clarify whether that refers to the "order date" or the "ship date." It helps to add synonyms as well, so the assistant can handle different ways users might phrase their questions.
So, while it may take a little extra effort upfront, making your dataset easy to search and understand pays off. Your AI Assistant can respond quickly and accurately, and your users get the answers they're looking for with less hassle.
09:43
Lois: Next, we'll outline the steps for configuring and indexing datasets for optimal performance.
Expert: First you need to confirm dataset access. You'll need read/write privileges to enable the AI Assistant and index the dataset. Then, on the Search tab, under "Index Dataset For," select "Assistant." Choose your language and, optionally, set an indexing schedule. Carefully pick columns users will likely question, like sales, region, or date. Avoid technical metadata, sensitive data, and high-cardinality columns like Customer IDs. Choose whether to index only column names or names plus data values. Including data values helps with typing suggestions and nuance. Avoid values no one will search on. Importantly, indexed dataset values are never sent to the LLM. They are retrieved from the dataset when visualizations are created. Assign synonyms to attribute names. Oracle Analytics suggests synonyms, but you can also add your own. Finally, save the changes and run indexing to make the dataset searchable by the Assistant.
10:50
Nikita: Now, let's look at how configuring subject areas can further tailor the experience.
Expert: You'll need to navigate to the Search Index by going through the Console's Configuration and Settings. Choose your language and indexing schedule. Index folders relevant to business questions; avoid non-relevant or sensitive columns. Select the Index Type: "Index Metadata Only" for high-cardinality columns (like IDs); "Index" for columns and values that users reference. As with datasets, clarify column meanings with user-friendly synonyms. Finalize settings and run the index to prepare your subject area for AI-powered queries.
Special care must be taken with date columns. Select and clearly identify the main business date so queries don't become ambiguous.
11:39
Lois: Synonyms play an important role in reducing ambiguity and enhancing results, so let's review the best practices for setting them up effectively.
Expert: If your columns use abbreviations, acronyms, or codes—like "custNo" or "Pname"—it's a good idea to provide synonyms to clarify what those attributes actually mean. Think about how people typically refer to those columns in everyday language. So instead of just "custNo," add "Customer Number" as a synonym, and for "Pname," you would use "Product Name."
If you can, actually renaming the column is usually more effective than just adding a synonym. But if that's not possible for some reason, a synonym is the next best thing.
Dates can be another tricky area. Datasets often have several date columns, like "Ship Date," "Order Date," and "Invoice Date." If a user asks, "Show me revenue by date," the system has to decide which date column to use, and it may just pick one for you. If you definitely want "Order Date" to be considered the default date, make sure to assign "date" as a synonym specifically for that column.
There's also the situation where different tables have columns with the same name—like "name" from both a Product table and an Employee table. You'll want to use synonyms for these columns too, to make it clear what each one means.
Adding more than one synonym can help as well. For example, if you have a "Yield" column, maybe also specify "revenue" and "income" as synonyms, so users can ask questions however they naturally would.
Avoid using reserved words or special characters in your synonyms. This means words like "Count," "Year," or anything that's also a SQL function, plus characters like "@" or special symbols. Also, steer clear of Unicode characters and terms that are analytical functions or date formats.
The whole point is to make your columns easy for business users or anyone else to reference naturally, using the terms they're most likely to try in a search.
And finally, just a few rules of thumb: synonyms can be up to 50 characters long, you can use up to 20 synonyms for each column, and you don't need to worry about uppercase or lowercase; column names aren't case sensitive.
Besides the basic setup and using synonyms, you can really improve the quality of answers from the AI Assistant (and the LLM it uses) by prepping and enriching your data. It's easier for the AI to work with words than numbers. Try "binning" numerical values into simple categories people can understand. For instance, instead of showing a long list of sales amounts, split them into groups like "small," "medium," and "large."
LLMs handle words better than blanks. If your data has missing or null values, fill them in with something meaningful, like "Unknown," "Not specified," or "Not available." Skipping this step could cause errors in queries, such as reports missing customers because their country is blank. Incorrect averages or summaries, especially if missing values are ignored. Issues with forecasting, if data gaps throw off trends. The AI Assistant might skip important columns or even generate errors.
Ambiguous or duplicate column names confuse both users and the LLM. Make your names clear and consistent.
You can use Oracle Analytics's Transform editor to add even more context. For example, you might extract the day of the week from a date, so you can easily ask, "Show sales for all Fridays in 2026."
By preparing your data with these steps, you help the AI Assistant give you more accurate and insightful answers, making data analysis a lot smoother!
15:27
Nikita: Finally, let's walk through the process of making the Oracle Analytics AI Assistant accessible to end users directly within their workbooks.
Expert: Permissions are controlled through application roles. Your administrator must create a specific role enabling access to the AI Assistant.
To enable consumer access, open your workbook in edit mode and select Present. From the Workbook tab, toggle it on in the Insights Panel section. Choose tabs like Watch Lists and Workbook Assistant. Decide which data sources in your workbook are available to the consumer.
Save, and then use Preview to simulate the user experience.
Consumers can access the AI Assistant by selecting Auto Insights at the top of the workbook. They can then type in natural language questions, review visualizations, and follow up.
Repeat these steps for each workbook you wish to enable.
16:22
Lois: This really puts agile, self-service analytics at everyone's fingertips, all while keeping data security and integrity front and center.
Nikita: And it's not just plug-and-play. To get the best results, you configure your data, enrich it, apply the right synonyms and permissions, and then your team can ask questions and visualize results just by using natural language.
Lois: If you're ready to kickstart or deepen your journey with the Oracle Analytics AI Assistant, or you want to review the topics we covered in today's episode in even greater detail, visit mylearn.oracle.com.
Nikita: That wraps up this episode. Thanks for spending time listening to us today. Join us next week for another episode of the Oracle University Podcast. Until then, this is Nikita Abraham…
Lois: And Lois Houston, signing off!
17:14
That's all for this episode of the Oracle University Podcast. If you enjoyed listening, please click Subscribe to get all the latest episodes. We'd also love it if you would take a moment to rate and review us on your podcast app. See you again on the next episode of the Oracle University Podcast.
00:00
Welcome to the Oracle University Podcast, the first stop on your cloud journey. During this series of informative podcasts, we'll bring you foundational training on the most popular Oracle technologies. Let's get started!
00:26
Nikita: Welcome to the Oracle University Podcast! I'm Nikita Abraham, Team Lead: Editorial Services with Oracle University, and with me is Lois Houston, Director of Communications and Adoption with Customer Success Services
Lois: Hello again! Last week's discussion was all about how Oracle Database@AWS stays secure and available. Today, we're joined by two experts from Oracle University. First, we'll hear from Rashmi Panda, Senior Principal Database Instructor, who will tell you how to monitor and log Oracle Database@AWS so your environment stays healthy and reliable.
Nikita: And then we're bringing in Samvit Mishra, Senior Manager, CSS OU Cloud Delivery, who will break down the best practices that help you secure and strengthen your Oracle Database@AWS deployment. Let's start with you, Rashmi. Is there a service that allows you to monitor the different AWS resources in real time?
Rashmi: Amazon CloudWatch is the cloud-native AWS monitoring service that can monitor the different AWS resources in real time. It allows you to collect the resource metrics and create customized dashboards, and even take action when certain criteria is met. Integration of Oracle Database@AWS with Amazon CloudWatch enables monitoring the metrics of the different database resources that are provisioned in Oracle Database@AWS.
Amazon CloudWatch collects raw data and processes it to produce near real-time metrics data. Metrics collected for the resources are retained for 15 months. This facilitates analyzing the historical data to understand and compare the performance, trends, and utilization of the database service resources at different time intervals. You can set up alarms that continuously monitor the resource metrics for breach of user-defined thresholds and configure alert notification or take automated action in response to that metric threshold being reached.
02:19
Lois: What monitoring features stand out the most in Amazon CloudWatch?
Rashmi: With Amazon CloudWatch, you can monitor Exadata VM Cluster, container database, and Autonomous database resources in Oracle Database@AWS. Oracle Database@AWS reports metrics data specific to the resource in AWS/ODB namespace of Amazon CloudWatch. Metrics can be collected only when the database resource is an available state in Oracle Database@AWS.
Each of the resource types have their own metrics defined in AWS/ODB namespace, for which the metrics data get collected.
02:54
Nikita: Rashmi, can you take us through a few metrics?
Rashmi: At Exadata database VM Cluster, there is CPU utilization, memory utilization, swap space storage file system utilization metric. Then there is load average on the server, what is the node status, and the number of allocated CPUs, et cetera. Then for container database, there is CPU utilization, storage utilization, block changes, parse count, execute count, user calls, which are important elements that can provide metrics data on database load. And for Autonomous Database metrics data include DB time, CPU utilization, logins, IOPS and IO throughput, RedoSize, parse, execute, transaction count, and few others.
03:32
Nikita: Once you've collected these metrics and analyzed database performance, what tools or services can you use to automate responses or handle specific events in your Oracle Database@AWS environment?
Rashmi: Then there is Amazon EventBridge, which can monitor events from AWS services and respond automatically with certain actions that may be defined. You can monitor events from Oracle Database@AWS in EventBridge, which sends events data continuously to EventBridge at real time. Eventbridge forwards these events data to target AWS Lambda and Amazon Simple Notification Service to perform any actions on occurrence of certain events.
Oracle Database@AWS events are structured messages that indicate changes in the life cycle of the database service resource. Eventbridge can filter events based on your defined rules, process them, and deliver to one or more targets. Event Bus is the router that receives the events, optionally transform them, and then delivers the events to the targets. Events from Oracle Database@AWS can be generated by two means: they can be generated from Oracle Database@AWS in AWS, and they can also be generated directly from OCI and received by EventBridge in AWS.
You can monitor Exadata Database and Autonomous Database resource events. Ensure that the Exadata infrastructure status is an available state. You can configure how the events are handled for these resources. You can define rules in EventBridge to filter the events of interest and the target, who is going to receive and process those events. You can filter events based on a pattern depending on the event type, and apply this pattern using Amazon EventBridge put-rule API, with the default event bus to route only those matching events to targets.
05:13
Lois: And what about events that AWS itself generates?
Rashmi: Events that are generated in AWS for the Oracle Database@AWS resources are delivered to the default event bus of your AWS account. These events that are generated in AWS for Oracle Database@AWS resources include lifecycle changes of the ODB network. The different network events are successful creation or failure of the creation of the ODB network, and successful deletion or failure in deletion of the ODB network.
When you subscribe to Oracle Database@AWS, then an event bus with prefix aws.partner/odb is created in your AWS account. All events generated in OCI for the Oracle Database@AWS resources are then received in this event bus. When you are creating filter pattern using Amazon EventBridge put-rule API, you must set the event bus name to this event bus. Make sure you do not delete this event bus. Events generated in OCI and received into event bus are extensive. They include events of Oracle Exadata infrastructure, VM Cluster, container, and pluggable databases.
06:14
Lois: If you want to look back at what's happened in your environment, like who made the changes or accessed resources, what's the best AWS service for logging and auditing all that activity?
Rashmi: Amazon CloudTrail is a logging service in AWS that records the different actions taken by a user or roles, or an AWS service. Oracle Database@AWS is integrated with Amazon Cloud Trail. This enables logging of all the different events on Oracle Database@AWS resources.
Amazon Cloud Trail captures all the API calls to Oracle Database@AWS as events. These API calls include calls from the Oracle Database@AWS console, and code calls to Oracle Database@AWS API operations. These log files are delivered to Amazon S3 bucket that you specify. These logs determine the identity of the caller who made the call request to Oracle Database@AWS, their IP from which the call originated, the time of the call, and some additional details.
CloudTrail event history stores immutable record of the past 90 days of management events in an AWS region. You can view, search, and download these records from CloudTrail Event History. You can access CloudTrail when you create an AWS account that automatically gives you the access to CloudTrail. Event history. If you would like to retain the logs for a longer period of time beyond 90 days, you can create CloudTrail trails or CloudTrail Lake event data store.
Management events in AWS provide information about management operations that are performed on the resources in your AWS account. Management operations are also called control plane operations. Thus, the control plane operations in Oracle Database@AWS are logged as management events in CloudTrail logs.
07:59
Are you a MyLearn subscriber? If so, you're automatically a member of the Oracle University Learning Community! Join millions of learners, attend exclusive live events, and connect directly with Oracle subject matter experts. Enjoy the latest news, join challenges, and share your ideas. Don't miss out! Become an active member today by visiting mylearn.oracle.com.
08:25
Nikita: Welcome back! Samvit, let's talk best practices. What should teams keep in mind when they're setting up and securing their Oracle Database@AWS environment?
Samvit: Use IAM roles and policies with least privilege to manage Oracle Database@AWS resources. This ensures only authorized users can provision or modify DB resources, reducing the risk of accidental or malicious changes.
Oracle Data Safe monitors database activity, user risk, and sensitive data, while AWS CloudTrail records all AWS API calls. Together, they give full visibility across the database and cloud layers.
Autonomous Database supports Oracle Database Vault for enforcing separation of duties. Exadata Database Service can integrate with Audit Vault and Database Firewall to prevent privileged users from bypassing security controls.
Enable multifactor authentication for AWS IAM users managing Oracle Database@AWS. This adds a strong second layer of protection against stolen credentials.
Always deploy your Oracle Database@AWS in private subnets without public IPs. Use AWS security groups and NACLs to strictly limit inbound and outbound traffic, allowing access only from trusted applications.
Exadata Database Service supports integration with Oracle Vault for key lifecycle management. And in case of Autonomous Database, the transparent data encryption keys are automatically managed. But you can bring your own keys with OCI Vault. Key rotation ensures compliance and reduces risk of key compromise.
Oracle Database@AWS enforces encrypted connections by default. Ensure clients connect with TLS 1.2 or 1.3 to protect data in transit from interception or tampering.
Use Oracle Data Safe's user assessment features to detect dormant users or excessive privileges. Disable unused accounts and rightsize permissions to reduce insider threats and security gap.
Export database audit logs to Oracle Data Safe Audit Vault or AWS S3 with object lock for immutability. This prevents lock tampering and ensures audit evidence is preserved for compliance.
11:25
Lois: OK, that covers security. Do you have any tips for making sure your Oracle Database@AWS setup is reliable and resilient?
Samvit: Start with clear recovery objectives. Define how much downtime and data loss each workload can tolerate. These targets drive your HADR architecture and backup strategy.
Implement business continuity measures to deliver maximum uptime for your databases. As a best practice, you must configure disaster recovery environment for your critical databases so that, in the event of any disaster affecting the primary database, applications can be immediately failed over to the DR environment, ensuring least application downtime and zero or minimal data loss. With Oracle Database@AWS, you can automate the creation and management of DR environment for your database services using different deployment capabilities. You can opt to configure either cross-availability zone DR in the same region or configure cross-region DR. Since cross-availability zone can only provide site failure protection, you must also configure a cross-region DR to protect against regional failure.
A DR plan is only effective if tested. Regular failover and switchover drills validate that people, processes, and systems can recover as designed.
For Exadata Database, Autonomous Recovery Service provides automated backup validation, recovery guarantees, and protection against accidental data loss or corruption.
Oracle-managed backups are fully managed by OCI. When you create your Oracle Exadata Database, you can enable automatic backups by choosing Enable Automatic Backups in the OCI Console. When you do that, you can select Amazon S3 or OCI Object Storage or Autonomous Recovery Service as the backup destination.
Don't just take backups. You also need to test them. Regularly restore backups into non-production environment to validate integrity and recovery time.
Plan beyond just the database. Map application and middleware dependencies to ensure end-to-end business resilience. A database failover is useless if dependent apps can't reconnect.
14:09
Nikita: Another area of interest is performance and cost. What practices help teams balance the two?
Samvit: Autonomous Database automatically scales CPU and storage as workloads grow. This ensures performance during peaks while avoiding overprovisioning. So you should enable ADB auto-scaling.
Monitor CPU, memory, and IO metrics with AWS CloudWatch to rightsize your compute. Scale up or down based on actual utilization instead of static provisioning.
Autonomous databases continuously evaluate and creates indexes automatically. This improves query performance without requiring manual tuning.
Use connection pooling in your applications to optimize database connections. Minimizing round-trip reduces latency and improves throughput.
Apply AWS tags to database and related resources for cost allocation and chargeback. Tagging also helps with governance and cost visibility.
Choose between bring your own license and license-included models for Oracle Database@AWS. The right model depends on your existing license portfolio and cost strategy.
Not all workloads need long backup retention. Adjust retention policies based on business needs to balance compliance with storage costs.
Exadata Database supports Oracle multitenant with pluggable databases. Consolidating databases reduces infrastructure footprint and licensing costs.
Performance tuning isn't just technical. Align metrics with business KPIs. correlating DB performance to user experience and revenue impact helps prioritize optimizations.
16:20
Lois: Before we wrap up, Samvit, let's look at operational efficiency. What advice do you have for making day-to-day operations more efficient?
Samvit: Use infrastructure as code tools like Terraform or AWS CloudFormation to automate provisioning. This ensures consistent, repeatable deployments with minimal manual errors.
For Autonomous Database, enable auto-start/stop to optimize costs by running databases only when needed. This is ideal for dev test or seasonal workloads.
Exadata Database Service provides fleet maintenance to patch multiple systems consistently. This reduces downtime and simplifies lifecycle management.
Integrate AWS CloudWatch for performance monitoring and EventBridge for event-driven automation. This helps detect issues early and trigger automated workflows.
Oracle Data Safe provides ready-to-use audit and compliance reports. Use these to streamline governance and reduce the effort of manual compliance tracking.
For Autonomous databases, Performance Hub simplifies monitoring while Exadata users benefit from AWR and ASH reports. Together, they give deep insights into performance trends.
Automated tagging policies and change management workflows help maintain governance. They ensure resources are tracked properly and changes are auditable.
Monitor storage consumption and growth patterns using AWS CloudWatch and the ADB Console. Proactive tracking helps avoid capacity issues and unexpected costs.
Send CloudTrail logs into EventBridge to trigger automated incident responses. This shortens response time and builds operational resilience.
18:36
Nikita: Samvit and Rashmi, thanks for spending time with us today. Your insights always help bring the bigger picture into focus.
Lois: They definitely do. And if you'd like to go deeper into everything we covered, head over to mylearn.oracle.com and look up the Oracle Database@AWS Architect Professional course. Until next time, this is Lois Houston…
Nikita: And Nikita Abraham, signing off!
19:03
That's all for this episode of the Oracle University Podcast. If you enjoyed listening, please click Subscribe to get all the latest episodes. We'd also love it if you would take a moment to rate and review us on your podcast app. See you again on the next episode of the Oracle University Podcast.
00:00
Welcome to the Oracle University Podcast, the first stop on your cloud journey. During this series of informative podcasts, we'll bring you foundational training on the most popular Oracle technologies. Let's get started!
00:26
Lois: Hello and welcome to the Oracle University Podcast! I'm Lois Houston, Director of Communications and Adoption with Customer Success Services, and with me is Nikita Abraham, Team Lead: Editorial Services with Oracle University.
Nikita: Hi everyone! In our last episode, we explored the security and migration strengths of Oracle Database@AWS. Today, we're joined once again by Senior Principal Database Instructor Rashmi Panda to look at how the platform keeps your database available and resilient behind the scenes.
01:00
Lois: It's really great to have you with us, Rashmi. As many of you may know, keeping critical business applications running smoothly is essential for success. And that's why it's so important to have deployments that are highly resilient to unexpected failures, whether those failures are hardware-, software-, or network-related. With that in mind, Rashmi, could you tell us about the Oracle technologies that help keep the database available when those kinds of issues occur?
Rashmi: Databases deployed in Oracle Database@AWS are built on Oracle's Foundational High Availability Architecture. Oracle Real Application Cluster or Oracle RAC is an Active-Active architecture where multiple database instances are concurrently running on separate servers, all accessing the same physical database stored in a shared storage to simultaneously process various application workloads.
Even though each instance runs on a separate server, they collectively appear as a single unified database to the application. As the workload grows and demands additional computing capacity, then new nodes can be added to the cluster to spin up new database instances to support additional computing requirements. This enables you to scale out your database deployments without having to bring down your application and eliminates the need to replace existing servers with high-capacity ones, offering a more cost-effective solution.
02:19
Nikita: That's really interesting, Rashmi. It sounds like Oracle RAC offers both scalability and resilience for mission-critical applications. But of course, even the most robust systems require regular maintenance to keep them running at their best. So, how does planned maintenance affect performance?
Rashmi: Maintenance on databases can take a toll on your application uptime. Database maintenance activities typically include applying of database patches or performing updates. Along with the database updates, there may also be updates to the host operating system. These operations often demand significant downtime for the database, which consequently leads to slightly higher application downtime.
Oracle Real Application Cluster provides rolling patching and rolling upgrades feature, enabling patching and upgrades in a rolling fashion without bringing down the entire cluster that significantly reduces the application downtime.
03:10
Lois: And what happens when there's a hardware failure? How does Oracle keep things running smoothly in that situation?
Rashmi: In the event of an instance or a hardware failure, Oracle RAC ensures automatic service failover. This means that if one of the instance or node in the cluster goes down, the system transparently failovers the service to an available instance in the cluster, ensuring minimal disruption to your application.
This feature enhances the overall availability and resilience of your database.
03:39
Lois: That sounds like a powerful way to handle unexpected issues. But for businesses that need even greater resilience and can't afford any downtime, are there other Oracle solutions designed to address those needs?
Rashmi: Oracle Exadata is the maximum availability architecture database platform for Oracle databases. Core design principle of Oracle Exadata is built around redundancy, consisting of networking, power supplies, database, and storage servers and their components.
This robust architecture ensures protection against the failure of any individual component, effectively guaranteeing continuous database availability. The scale out architecture of Oracle Exadata allows you to start your deployment with two database servers and three storage servers, having different number of CPU cores and different sizes and types of storage to meet the current business needs.
04:26
Lois: And if a business suddenly finds demand growing, how does the system handle that? Is it able to keep up with increased needs without disruptions?
Rashmi: As the demand increases, the system can be easily expanded by adding more servers, ensuring that the performance and capacity grow with your business requirements. Exadata Database Service deployment in Oracle Database@AWS leverages this foundational technologies to provide high availability of database system. This is achieved by provisioning databases using Oracle Real Application Cluster, hosted on the redundant infrastructure provided by Oracle Exadata Infrastructure Platform.
This deployment architecture provides the ability to scale compute and storage to growing resource demands without the need for downtime. You can scale up the number of enabled CPUs symmetrically in each node of the cluster when there is a need for higher processing power or you can scale out the infrastructure by adding more database and storage servers up to the Exadata Infrastructure model limit, which in itself is huge enough to support any large workloads.
The Exadata Database Service running on Oracle RAC instances enables any maintenance on individual nodes or patching of the database to be performed with zero or negligible downtime. The rolling feature allows patching one instance at a time, while services seamlessly failover to the available instance, ensuring that the application experienced little to no disruption during maintenance.
Oracle RAC, coupled with Oracle Exadata redundant infrastructure, protects the Database Service from any single point of failure. This fault-tolerant architecture features redundant networking and mirrored disk, enabling automatic failover in the event of a component failure. Additionally, if any node in the cluster fails, there is zero or negligible disruption to the dependent applications.
06:09
Nikita: That's really impressive, having such strong protection against failures and so little disruption, even during scaling and maintenance. But let's say a company wants those high-availability benefits in a fully managed environment, so they don't have to worry about maintaining the infrastructure themselves. Is there an option for that?
Rashmi: Similar to Oracle Exadata Database Service, Oracle Autonomous Database Service on dedicated infrastructure in Oracle Database@AWS also offers the same feature, with the key difference being that it's a fully managed service. This means customers have zero responsibility for maintaining and managing the Database Service.
This again, uses the same Oracle RAC technology and Oracle Exadata infrastructure to host the Database Service, where most of the activities of the database are fully automated, providing you a highly available database with extreme performance capability. It provides an elastic database deployment platform that can scale up storage and CPU online or can be enabled to autoscale storage and compute.
Maintenance activities on the database like database updates are performed automatically without customer intervention and without the need of downtime, ensuring seamless operation of applications.
07:20
Lois: Can we shift gears a bit, Rashmi? Let's talk about protecting data and recovering from the unexpected. What Oracle technologies help guard against data loss and support disaster recovery for databases?
Rashmi: Oracle Database Autonomous Recovery Service is a centralized backup management solution for Oracle Database services in Oracle Cloud Infrastructure.
It automatically takes backup of your Oracle databases and securely stores them in the cloud. It ensures seamless data protection and rapid recovery for your database. It is a fully managed solution that eliminates the need for any manual database backup management, freeing you from associated overhead.
It implements an incremental forever backup strategy, a highly efficient approach where only the changes since the last backup are identified and backed up. This approach drastically reduces the time and storage space needed for backup, as the size of the incremental changes is significantly lower than the full database backup.
08:17
Nikita: And what's the benefit of using this backup approach?
Rashmi: The benefit of this approach is that your backups are completed faster, with much lesser compute and network resources, while still guaranteeing the full recoverability of your database in the event of a failure. You can achieve zero data loss with this backup service by enabling the real-time protection option, while minimizing the data loss by recovering data up to the last subsecond.
It is highly recommended to enable this option for mission-critical databases that cannot tolerate any data loss, whether due to a ransomware attack or due to an unplanned outage. The protection policy can retain the protected database backups for a minimum of 14 days to a maximum of 95 days.
The recovery service requires and enforces the backups are encrypted. These backups are compressed and encrypted during the backup process. The integrity of the backups is continuously validated without placing a burden on the production database.
This ensures that the stored backup data is consistent and recoverable when needed. This protects against malicious user activity or any ransomware attack. With strict policy-based retention strategy, it prevents modification or deletion of backup data by malicious users.
09:30
Lois: Now, let's look at the next layer of protection. Rashmi, can you tell us about Oracle Active Data Guard?
Rashmi: Oracle Active Data Guard provides highly available data protection and disaster recovery for Enterprise Oracle Databases. It creates and manages one or more transactionally consistent standby copies of production database, which is the active primary.
The standby database is isolated from production environment located miles away in a distance data center, ensuring the standby remains protected and unaffected, even if the primary is impacted by a disaster.
In the event of a disaster or data corruption occurring at the primary, the standby can take over the role as new primary, thus allowing business to continue its operations uninterrupted. It keeps the standby database in sync with the production database by continuously applying change logs from production.
10:25
Do you want to stay ahead in today's fast-paced world? Check out our New Features courses for Oracle Fusion Cloud Applications. Each quarter brings new updates and hands-on training to keep your skills sharp and your knowledge current. Head over to mylearn.oracle.com to dive into the latest advancements!
10:45
Nikita: Welcome back! Rashmi, how does Oracle Active Data Guard operate in practice?
Rashmi: It uses the knowledge of Oracle Database block format to continuously validate physical blocks or logical intrablock corruption during redo transport and change apply. With automatic block repair feature, whenever any corrupt block is detected in the primary or the standby database, then it is automatically repaired by transferring a good copy of the block from other destination that holds it. This is handled transparently without any error being reported in the application.
It enables you to upload the read-only workloads and backup operations to the standby database, reducing the load on the production database. You can achieve zero data loss at any distance by configuring a special synchronization mechanism known as parsing.
File systems form the attack surface for ransomware. Since Active Data Guard replicates the data at the memory level, any ransomware attack on the primary database will never be replicated to the standby database. This allows for a safe failover to the standby without any data loss, and shielding the database from effects of the attack.
You can enable automatic failover of the primary database to a chosen standby database without any manual intervention by configuring a Data Guard Broker. The Data Guard Broker continuously monitors the primary database and automatically performs a failover to the standby when the predefined failover conditions are met. Active Data Guard enables you to perform database maintenance or database software upgrades with almost zero or minimal downtime.
12:18
Lois: And how does disaster recovery work for Exadata Database Service in Oracle Database@AWS?
Rashmi: Exadata Database Service, by design, are already protected against local failures by use of technologies like Oracle RAC and Oracle Exadata.
Now, by deploying Exadata Database Service across multiple availability zones in an AWS region, it can ensure that your database services remain resilient to site failures. It leverages Oracle Active Data Guard to create standby in a separate availability zone such that if the primary availability zone is affected, then all application traffic can be routed to the database services in the secondary availability zone, restoring business continuity of the application back to normal.
Through continuous validation of the data blocks at both the primary and the standby database, any potential corruption is detected and prevented. This ensures data integrity and protection across the entire database service.
By leveraging zero data loss Autonomous Recovery Service, the database ensures that the backup remains secure and unaffected by ransomware. This enables rapid restoration of clean, uncompromised data in the event of an attack.
Periodic patching and upgrades are performed online in a rolling fashion with little to no impact on the application uptime using a combination of Oracle RAC and Oracle Active Data Guard technologies. For all resource-intensive workloads like database backup or generating monthly reports, which are read-only in nature, they can be uploaded to the standby, reducing the load on the production database.
In the cross-availability zone DR setup, you have the flexibility to configure Active Data Guard to use either the AWS network or the OCI network for keeping database redo logs to the standby database.
Choosing which network to use for the traffic is entirely at the enterprise discretion. However, both are Oracle maximum availability–compliant and the setup is pretty simple. If the network traffic being used is OCI network or AWS network, then respective cloud provider is responsible for ensuring the reliability.
You have to take into account the different charges that each cloud provider may have. And you can provision multiple standby databases using the console. Optionally, you may set up a broker manually to enable automatic failover capability.
14:30
Nikita: We just covered cross-availability-zone protection. But what if an entire AWS region goes down?
Rashmi: This is where we can provide an additional level of protection by provisioning cross-region disaster recovery for your Exadata Database Service in Oracle Database@AWS.
This deployment protects your database against regional disasters. You can provision another DR environment in a different AWS region that supports Oracle Database@AWS. This deployment, together with the cross-availability zone deployment, complements your highly available and protected database service deployment in Oracle Database@AWS.
Under the hood, it uses the same Oracle Database technologies that include Oracle Active Data Guard, OCI Autonomous Recovery Service, Oracle Exadata, Oracle RAC to provide the same capabilities as in case of cross-availability zone deployment.
Here too, you have the flexibility to configure Oracle Active Data Guard to use either AWS network or OCI network for shipping database redo logs to the standby. And for the network traffic options, the feature remains the same, except a small difference with respect to chargeback.
When using OCI Network for cross-region deployment, there is no charge for the first 10 TB of data transfer per month. Beyond that, standard OCI charges would apply. When using AWS network, you may refer to AWS charging sheet for the cross-region traffic.
15:49
Nikita: Thank you so much, Rashmi, for this insightful episode.
Lois: Yes, thank you! And if you want to dive deeper into the topics we covered today, go to mylearn.oracle.com and search for the Oracle Database@AWS Architect Professional course. Until next time, this is Lois Houston…
Nikita: And Nikita Abraham, signing off!
16:13
That's all for this episode of the Oracle University Podcast. If you enjoyed listening, please click Subscribe to get all the latest episodes. We'd also love it if you would take a moment to rate and review us on your podcast app. See you again on the next episode of the Oracle University Podcast.
00:00
Welcome to the Oracle University Podcast, the first stop on your cloud journey. During this series of informative podcasts, we'll bring you foundational training on the most popular Oracle technologies. Let's get started!
00:26
Nikita: Welcome to the Oracle University Podcast! I'm Nikita Abraham, Team Lead: Editorial Services with Oracle University, and with me is Lois Houston, Director of Communications and Adoption with Customer Success Services.
Lois: Hello again! We're continuing our discussion on Oracle Database@AWS and in today's episode, we're going to talk about the aspects of security and migration with two special guests: Samvit Mishra and Rashmi Panda. Samvit is a Senior Manager and Rashmi is a Senior Principal Database Instructor.
00:59
Nikita: Hi Samvit and Rashmi! Samvit, let's begin with you. What are the recommended security best practices and data protection mechanisms for Oracle Database@AWS?
Samvit: Instead of everyone using the root account, which has full access, we create individual users with AWS, IAM, Identity Center, or IAM service.
And in addition, you must use multi-factor authentication. So basically, as an example, you need a password and a temporary code from virtual MFA app to log in to the console.
Always use SSL or TLS to communicate with AWS services. This ensures data in transit is encrypted. Without TLS, the sensitive information like credentials or database queries can be intercepted.
AWS CloudTrail records every action taken in your AWS account-- who did what, when, and from where. This helps with audit, troubleshooting, and detecting suspicious activity. So you must set up API and user activity logging with AWS CloudTrail.
Use AWS encryption solutions along with all default security controls within AWS services. To store and manage keys by using transparent data encryption, which is enabled by default, Oracle Database@AWS uses OCI vaults. Currently, Oracle Database@AWS doesn't support the AWS Key Management Service.
You should also use advanced managed security services such as Amazon Macie, which assists in discovering and securing sensitive data that is stored in Amazon S3.
03:08
Lois: And how does Oracle Database@AWS deliver strong security and compliance?
Samvit: Oracle Database@AWS enforces transparent data encryption for all data at REST, ensuring stored information is always protected. Data in transit is secured using SSL and Native Network Encryption, providing end-to-end confidentiality.
Oracle Database@AWS also uses OCI Vault for centralized and secure key management. This allows organizations to manage encryption keys with fine-grained control, rotation policies, and audit capabilities to ensure compliance with regulatory standards. At the database level, Oracle Database@AWS supports unified auditing and fine-grained auditing to track user activity and sensitive operations.
At the resource level, AWS CloudTrail and OCI audit service provide comprehensive visibility into API calls and configuration changes. At the database level, security is enforced using database access control lists and Database Firewall to restrict unauthorized connections. At the VPC level, network ACLs and security groups provide layered network isolation and access control. Again, at the database level, Oracle Database@AWS enforces access controls to Database Vault, Virtual Private Database, and row-level security to prevent unauthorized access to sensitive data. And at a resource level, AWS IAM policies, groups, and roles manage user permissions with the fine-grained control.
05:27
Lois Samvit, what steps should users be taking to keep their databases secure?
Samvit: Security is not a single feature but a layered approach covering user access, permissions, encryption, patching, and monitoring.
The first step is controlling who can access your database and how they connect. At the user level, strong password policies ensure only authorized users can login. And at the network level, private subnets and network security group allow you to isolate database traffic and restrict access to trusted applications only.
One of the most critical risks is accidental or unauthorized deletion of database resources. To mitigate this, grant delete permissions only to a minimal set of administrators. This reduces the risk of downtime caused by human error or malicious activity. Encryption ensures that even if the data is exposed, it cannot be read. By default, all databases in OCI are encrypted using transparent data encryption. For migrated databases, you must verify encryption is enabled and active. Best practice is to rotate the transparent data encryption master key every 90 days or less to maintain compliance and limit exposure in case of key compromise.
Unpatched databases are one of the most common entry points for attackers. Always apply Oracle critical patch updates on schedule. This mitigates known vulnerabilities and ensures your environment remains protected against emerging threats.
07:33
Nikita: Beyond what users can do, are there any built-in features or tools from Oracle that really help with database security?
Samvit: Beyond the basics, Oracle provides powerful database security tools. Features like data masking allow you to protect sensitive information in non-production environments. Auditing helps you monitor database activity and detect anomalies or unauthorized access.
Oracle Data Safe is a managed service that takes database security to the next level. It can access your database configuration for weaknesses. It can also detect risky user accounts and privileges, identify and classify sensitive data. It can also implement controls such as masking to protect that data. And it can also continuously audit user activity to ensure compliance and accountability.
Now, transparent data encryption enables you to encrypt sensitive data that you store in tables and tablespaces. It also enables you to encrypt database backups. After the data is encrypted, this data is transparently decrypted for authorized users or applications when they access that data.
You can configure OCI Vault as a part of the transparent data encryption implementation. This enables you to centrally manage keystore in your enterprise. So OCI Vault gives centralized control over encryption keys, including key rotation and customer managed keys.
09:23
Lois: So obviously, lots of companies have to follow strict regulations. How does Oracle Database@AWS help customers with compliance?
Samvit: Oracle Database@AWS has achieved a broad and rigorous set of compliance certifications. The service supports SOC 1, SOC 2, and SOC 3, as well as HIPAA for health care data protection. If we talk about SOC 1, that basically covers internal controls for financial statements and reporting. SOC 2 covers internal controls for security, confidentiality, processing integrity, privacy, and availability.
SOC 3 covers SOC 2 results tailored for a general audience. And HIPAA is a federal law that protects patients' health information and ensures its confidentiality, integrity, and availability. It also holds certifications and attestations such as CSA STAR, C5.
Now C5 is a German government standard that verifies cloud providers meet strict security and compliance requirements. CSA STAR attestation is an independent third-party audit of cloud security controls. CSA STAR certification also validates a cloud provider's security posture against CSA's cloud controls matrix. And HDS is a French certification that ensures cloud providers meet stringent requirements for hosting and protecting health care data.
Oracle Database@AWS also holds ISO and IEC standards. You can also see PCI DSS, which is basically for payment card security and HITRUST, which is for high assurance health care framework. So, these certifications ensure that Oracle Database@AWS not only adheres to best practices in security and privacy, but also provides customers with assurance that their workloads align with globally recognized compliance regimes.
11:47
Nikita: Thank you, Samvit. Now Rashmi, can you walk us through Oracle's migration solution that helps teams move to OCI Database Services?
Rashmi: Oracle Zero-Downtime Migration is a robust and flexible end-to-end database migration solution that can completely automate and streamline the migration of Oracle databases. With bare minimum inputs from you, it can orchestrate and execute the entire migration task, virtually needing no manual effort from you.
And the best part is you can use this tool for free to migrate your source Oracle databases to OCI Oracle Database Services faster and reliably, eliminating the chances of human errors. You can migrate individual databases or migrate an entire fleet of databases in parallel.
12:34
Nikita: Ok. For someone planning a migration with ZDM, are there any key points they should keep in mind?
Rashmi: When migrating using ZDM, your source databases may require minimal downtime up to 15 minutes or no downtime at all, depending upon the scenario. It is built with the principles of Oracle maximum availability architecture and leverages technologies like Oracle GoldenGate and Oracle Data Guard to achieve high availability and online migration workflow using Oracle migration methods like RMAN, Data Pump, and Database Links.
Depending on the migration requirement, ZDM provides different migration method options. It can be logical or physical migration in an online or offline mode. Under the hood, it utilizes the different database migration technologies to perform the migration.
13:23
Lois: Can you give us an example of this?
Rashmi: When you are migrating a mission critical production database, you can use the logical online migration method. And when you are migrating a development database, you can simply choose the physical offline migration method.
As part of the migration job, you can perform database upgrades or convert your database to multitenant architecture. ZDM offers greater flexibility and automation in performing the database migration.
You can customize workflow by adding pre or postrun scripts as part of the workflow. Run prechecks to check for possible failures that may arise during migration and fix them. Audit migration jobs activity and user actions. Control the execution like schedule a job pause, resume, if needed, suspend and resume the job, schedule the job or terminate a running job. You can even rerun a job from failure point and other such capabilities.
14:13
Lois: And what kind of migration scenarios does ZDM support?
Rashmi: The minimum version of your source Oracle Database must be 11.2.0.4 and above. For lower versions, you will have to first upgrade to at least 11.2.0.4. You can migrate Oracle databases that may be of the Standard or Enterprise edition.
ZDM supports migration of Oracle databases, which may be a single-instance, or RAC One Node, or RAC databases. It can migrate on Unix platforms like Linux, Oracle Solaris, and AIX. For Oracle databases on AIX and Oracle Solaris platform, ZDM uses logical migration method.
But if the source platform is Linux, it can use both physical and logical migration method. You can use ZDM to migrate databases that may be on premises, or in third-party cloud, or even within Oracle Cloud Infrastructure. ZDM leverages Oracle technologies like RMAN datacom, Database Links, Data Guard, Oracle GoldenGate when choosing a specific migration workflow.
15:15
Are you ready to revolutionize the way you work? Discover a wide range of Oracle AI Database courses that help you master the latest AI-powered tools and boost your career prospects. Start learning today at mylearn.oracle.com.
15:35
Nikita: Welcome back! Rashmi, before someone starts using ZDM, is there any prep work they should do or things they need to set up first?
Rashmi: Working with ZDM needs few simple configuration. Zero-downtime migration provides a command line interface to run your migration job. First, you have to download the ZDM binary, preferably download from my Oracle Support, where you can get the binary with the latest updates.
Set up and configure the binary by following the instructions available at the same invoice node. The host in which ZDM is installed and configured is called the zero-downtime migration service host. The host has to be Oracle Linux version 7 or 8, or it can be RCL 8.
Next is the orchestration step where connection to the source and target is configured and tested like SSH configuration with source and target, opening the ports in respective destinations, creation of dump destination, granting required database privileges. Prepare the response file with parameter values that define the workflow that ZDM should use during Oracle Database migration.
You can also customize the migration workflow using the response file. You can plug in run scripts to be executed before or after a specific phase of the migration job. These customizations are called custom plugins with user actions.
Your sources may be hosted on-premises or OCI-managed database services, or even third-party cloud. They may be Oracle Database Standard or Enterprise edition and on accelerator infrastructure or a standard compute.
The target can be of the same type as the source. But additionally, ZDM supports migration to multicloud deployments on Oracle Database@Azure, Oracle Database@Google Cloud, and Oracle Database@AWS.
You begin with a migration strategy where you list the different databases that can be migrated, classification of the databases, grouping them, performing three migration checks like dependencies, downtime requirement versions, and preparing the order migration, the target migration environment, et cetera.
17:27
Lois: What migration methods and technologies does ZDM rely on to complete the move?
Rashmi: There are primarily two types of migration: physical or logical.
Physical migration pertains to copy of the database OS blocks to the target database, whereas in logical migration, it involves copying of the logical elements of the database like metadata and data.
Each of these migration methods can be executed when the database is online or offline. In online mode, migration is performed simultaneously while the changes are in progress in the source database.
While in offline mode, all changes to the source database is frozen. For physical offline migration, it uses backup and restore technique, while with the physical online, it creates a physical standby using backup and restore, and then performing a switchover once the standby is in sync with the source database.
For logical offline migration, it exports and imports database metadata and data into the target database, while in logical online migration, it is a combination of export and import operation, followed by apply of incremental updates from the source to the target database. The physical or logical offline migration method is used when the source database of the application can allow some downtime for the migration.
The physical or logical online migration approach is ideal for scenarios where any downtime for the source database can badly affect critical applications. The only downtime that can be tolerated by the application is only during the application connection switchover to the migrated database.
One other advantage is ZDM can migrate one or a fleet of Oracle databases by executing multiple jobs in parallel, where each job workflow can be customized to a specific database need. It can perform physical or logical migration of your Oracle databases. And whether it should be performed online or offline depends on the downtime that can be approved by business.
19:13
Nikita: Samvit and Rashmi, thanks for joining us today.
Lois: Yeah, it's been great to have you both. If you want to dive deeper into the topics we covered today, go to mylearn.oracle.com and search for the Oracle Database@AWS Architect Professional course. Until next time, this is Lois Houston…
Nikita: And Nikita Abraham, signing off!
19:35
That's all for this episode of the Oracle University Podcast. If you enjoyed listening, please click Subscribe to get all the latest episodes. We'd also love it if you would take a moment to rate and review us on your podcast app. See you again on the next episode of the Oracle University Podcast.
00:00
Welcome to the Oracle University Podcast, the first stop on your cloud journey. During this series of informative podcasts, we'll bring you foundational training on the most popular Oracle technologies. Let's get started!
00:26 Lois: Hello and welcome to the Oracle University Podcast! I'm Lois Houston, Director of Communications and Adoption with Customer Success Services, and with me is Nikita Abraham, Team Lead: Editorial Services with Oracle University.
Nikita: Hi everyone! In our last episode, we began the discussion on Oracle Database@AWS. Today, we're diving deeper into the database services that are available in this environment. Susan Jang, our Senior Principal OCI Instructor, joins us once again.
00:56
Lois: Hi Susan! Thanks for being here today. In our last conversation, we compared Oracle Autonomous Database and Exadata Database Service. Can you elaborate on the fundamental differences between these two services? Susan: Now, the primary difference is between the service is really the management model. The Autonomous is fully-managed by Oracle, while the Exadata provides flexibility for you to have the ability to customize your database environment while still having the infrastructure be managed by Oracle.
01:30
Nikita: When it comes to running Oracle Database@AWS, how do Oracle and AWS each chip in? Could you break down what each provider is responsible for in this setup?
Susan: Oracle Database@AWS is a collaboration between Oracle, as well as AWS. It allows the customer to deploy and run Oracle Database services, including the Oracle Autonomous Database and the Oracle Exadata Database Service directly in AWS data centers.
Oracle provides the ability of having the Oracle Exadata Database Service on a dedicated infrastructure. This service delivers full capabilities of Oracle Exadata Database on the Oracle Exadata hardware. It offers high performance and high security for demanding workloads. It has cloud automation, resource scaling, and performance optimization to simplify the management of the service.
Oracle Autonomous Database on the dedicated Exadata infrastructure provides a fully Autonomous Database on this dedicated infrastructure within AWS. It automates the database management tasks, including patching, backups, as well as tuning, and have built-in AI capabilities for developing AI-powered applications and interacting with data using natural language. The Oracle Database@AWS integrates those core database services with various AWS services for a comprehensive unified experience.
AWS provides the ability of having a cloud-based object storage, and that would be the Amazon S3. You also have the ability to have other services, such as the Amazon CloudWatch. It monitors the database metrics, as well as performance. You also have Amazon Bedrock. It provides a development environment for a generative AI application.
And last but not the least, amongst the many other services, you also have the SageMaker. This is a cloud-based platform for development of machine learning models, a wonderful integration with our AI application development needs.
03:54
Lois: How has the work involved in setting up and managing databases changed over time?
Susan: When we take a look at the evolution of how things have changed through the years in our systems, we realize that transfer responsibility has now been migrated more from customer or human interaction to services. As the database technology evolves from the traditional on-premise system to the Exadata engineered system, and finally to the Autonomous Database, certain services previously requiring significant manual intervention has become increasingly automated, as well as optimized.
04:34
Lois: How so?
Susan: When we take a look at the more traditional database environment, it requires manual configuration of hardware, operating system, as well as the software of the database, along with initial database creation. As we evolve into the Exadata environment, the Exadata Database, specifically the Exadata cloud service, simplifies provisioning through web-based wizard, making it faster and easier to deploy the Oracle Database in an optimized hardware. But when we move it to an Autonomous environment, it automates the entire provisioning process, allowing users to rapidly deploy mission-critical databases without manual intervention, or DBA involvement. So as customers move toward Autonomous Database through Exadata, we have fewer components that the customer needs to manage in the database stack, which gives them more time to focus more on important parts of the business.
With the Exadata Database, it provides a co-management of backup, restore, patches and upgrade, monitoring, and tuning. And it allows the administrator the ability to customize the configuration to meet their very specific business needs. With Autonomous Database, it's now fully automated and it's a greater responsibility is shift toward the service. With Autonomous Database on dedicated infrastructure, it provides that fine-grained tuning more for Oracle to help you perform that task.
06:15
Nikita: If we narrow it down just to Oracle and AWS for a moment, which parts of the infrastructure or day-to-day ops are handled by each company behind the scenes?
Susan: When we take a look at Oracle Database@AWS, it operates under a shared responsibility model, dividing the service responsibilities between AWS, as well as Oracle, as well as you, the customer.
The AWS has the data center. Remember, this is where everything is running. The Oracle Database@AWS, the Oracle Database infrastructure may be managed by Oracle and run in OCI, but is physically located within the AWS regions, as well as the availability zones and the AWS data centers.
The AWS infrastructure, in this case, is AWS's responsibility to secure the environment, including the physical security of the data center, the network infrastructure, and the foundational services like the compute, the storage, and the networking, all within AWS.
The next thing of who's responsible for the shared responsibility, it's Oracle. And that would be the hardware. We provide the hardware. While the hardware may physically reside in the AWS data center, Oracle's Cloud Infrastructure operational team will be the one managing this infrastructure, including software patching, infrastructure update, and other operations through a connection to OCI. This means Oracle handles the provisioning, as well as the maintenance of any of the underlying Exadata infrastructure hardware.
When we take a look at the next thing that it manages, it is also responsible besides the infrastructure of the Exadata. It is also the ability to manage the hardware, the environment of that hardware through the database control plane. So Oracle manages the administration and the operational for the Oracle Database@AWS service, which resides in OCI. So this includes the capabilities for management, upgrade, and operational features.
08:37
Nikita: And what are the key things that still remain on the customer's plate?
Susan: If you are in an Exadata environment or in an Autonomous environment, it is you, the customer, who is responsible for most of the database administration operation, as well as managing the users and the privileges of the user to access the database. No one knows the database and who should be accessing the data better than you.
You will be responsible for securing the applications, the data of the database, which now allows you to define who has access to it, control the data encryption, and securing the application that interacts with the Oracle Database@AWS.
09:29
Lois: Susan, we've talked about both Autonomous Database and Exadata Database Service being available on Oracle Database@AWS, but what's different about how each works in this environment, and why might someone pick one over the other?
Susan: Both databases, even though they run on the same Exadata Cloud Infrastructure, both can be deployed on both public cloud, as well as the customer data center, which is Oracle Cloud@Customer.
The Autonomous Database is a fully managed, completely automated environment. And this provides a capability of having a fully Autonomous Database Service running on a dedicated Oracle Exadata Infrastructure within your AWS data center.
The Exadata is a service that is provided and managed by Oracle and is physically running in the AWS data center, but is designed for mission critical workload and includes RAC environment, Real Application Cluster, offering a high performance availability and full feature capability that is similar to other Exadata environment, such as those running in our customers' data center.
The primary difference is really between the two services. When you take a look at the Exadata, the customer only pays for the compute resources that is used. Autoscaling can be used for a variety or variable resources, the workload, to automatically scale to the compute resources up or down when required.
The Autonomous Database also has automatic optimization for data warehousing, transaction processing, as well as JSON workload. The Exadata service, the customer again, also pays for the compute resources that they allocate. But that's the key thing. The customer can initiate the scaling because it's very specific to the workload that is needed.
So when you take a look at the two database services, one gives the ability to let Oracle fully manage it, including the scaling capability. The other, the Exadata, provides you the capability of having the environment that it's running on the infrastructure be managed by Oracle that adds a database administrator. You may wish to have a little bit more granular control of how you want the database to not only be scaling, but how you wish to customize how the database will be running.
12:10
Nikita: Focusing on Autonomous Database for a moment, what should teams know about how it actually runs within AWS?
Susan: The Autonomous Database on the Oracle Database@AWS brings the power of the Oracle's self-managing, self-securing, and self-repairing database into your AWS environment.
It provides the capability of the database automatically, automates many of the traditional, complex, and time-consuming database management tasks, such as the provisioning of the database, the patching, the backing up, and the scaling, and the performance tuning, reducing the need for any manual intervention by the database administrator.
Running the Autonomous Database in your AWS region enables low latency access for your AWS applications and services that is deployed within AWS, thus improving performance and response time. With the Autonomous Database, it automates many of the traditional things that is now automatically done by Oracle. It also supports integration with various AWS services, such as the ability of the not in addition to AIM, but the cloud formation, the CloudWatch for monitoring and the S3 for the storage.
You can easily migrate existing Exadata workload, including those running on Oracle RAC to AWS with minimum or no change to any of your databases or applications. In addition, there's a really powerful capability and feature of the database is called zero ETL, and that's zero extract, transformation, and load.
It's an integration capability with services like your Amazon Redshift, enabling near real time analytics and machine learning on your transactional database that is stored within the Autonomous Database on in your AWS environment. So with the Autonomous Database, it checks off many of the boxes for automatic capability, securing, tuning, as well as scaling the database.
With the Autonomous Database in the Dedicated Exadata Infrastructure, the Exadata Cloud Infrastructure resource represents the physical system, which can be expanded with storage, as well as compute services, the compute host. This now provides the ability to have an isolated zone for the highest protection from other tenants. The data is stored on a dedicated server only for one customer. That would be you.
14:56
Lois: Could you explain the role of Autonomous VM? What are its primary benefits?
Susan: The virtual machine or as we refer to them as the cluster, includes the grid infrastructure and provides a private network isolation. This provides you the capability of having custom memory, core, and storage allocation.
The Oracle Grid Infrastructure includes the Oracle Clusterware, which manages the cluster, as well as the servers, and ensure that the database can failover to another server in case of any failure.
15:34
Be a part of something big by joining the Oracle University Learning Community! Connect with over 3 million members, including Oracle experts and fellow learners. Engage in topical forums, share your knowledge, and celebrate your achievements together. Discover the community today at mylearn.oracle.com.
15:55
Nikita: Welcome back! Susan, what is the Autonomous Container Database?
Susan: With the Autonomous Container Database, and you need that if you're going to create an Autonomous Database, you need to provision that within your Autonomous Exadata VM Cluster. It serves as a container to hold or to house one or more Autonomous Databases.
This allows multiple Autonomous Databases to coexist in the same infrastructure while still being logically separated. And this allows for the separation of databases based on their intended use. Think of a database for production. Think of a database for development. Think of a database for testing. You may have different database versions within the same infrastructure.
This isolation makes it easier for you to be able to meet your SLA, your Service Level Agreement, any long-term backups you may have, very specific encryption key needs to prevent issues from one database impacting another. So, the ability to have everything be isolated and secure is still grouping it in a manner that will meet your business needs.
17:08
Lois: Looking at Exadata Database Service specifically, what are some standout advantages for customers who deploy it on Oracle Database@AWS? Is there anything in particular they should get excited about in terms of performance or integration with AWS?
Susan: The Exadata Database Service is running on a dedicated Exadata Infrastructure that's deployed within your AWS data center. It delivers the same Exadata service experience in cloud control planes as the Oracle Cloud Infrastructure, allowing you to leverage existing skills and processing across your multi-cloud environment.
It addresses the data resiliency, or residency rather. And that's the scenario where many of our customers has the need. You have a need because of your security compliance to have the data local to you. By having the Exadata Database in your Oracle Database@AWS, it is running in your data center. So, this addresses that very important need, data residency, to have it close to you.
It also allows for seamless integration with other AWS services and applications. So now you have a capability of a hybrid cloud architecture leveraging the benefit of both Oracle Exadata and your AWS system. It has built-in high availability, the RAC application cluster, as well as Data Guard, a capability of addressing disaster recovery capability.
This also provides the ability for you to scale your compute, as well as your storage and your I/O resources independently. So as mentioned with Exadata, you have flexibility of how you want your database to be running individually. So just like the Autonomous, the Exadata Database checks off many of the boxes for running a mission-critical with high availability, highly redundant hardware and software features, along with extreme performance, scalability, and reliability.
This now allows you to run your AI environment, your online transaction processing, your analytic workload on any scale on the Exadata Infrastructure running in the Oracle Cloud. And in this case, running in your data center.
19:45
Nikita: If a business suddenly needs more capacity, how does scaling work with Exadata Database Service versus Autonomous Database on Oracle Database@AWS?
Susan: So with the Exadata scaling, you now can scale to meet expected demands so you know at certain point I will need more. I will then ask it to scale at that point when I will assign it-- and I'm using an example, I will assign it three computer cores all the time. But there may be demands. Think of your end of the quarter, end of the year processing that you may need more. So, you are enabling the compute cores to scale at the time you need it.
And what's cool is it will then, when it's no longer needed, it will then scale back down to the original three cores that you assign. So, you only pay for the enabled cores. But what's very cool about the Autonomous is that it is real-time scaling. So, with Autonomous, now you have the capability using Autonomous Database since it is self-tuning, self-monitoring, the Autonomous Database actually monitors the workload requirement and scales to match the workload demand.
Once the minimum level of the compute is defined and enabled, the automatic scaling is set. Autonomous Database will adjust to the consumption when it's needed, and it will scale back down when it's not. So though the Exadata is pretty cool, it will scale up and down on the workload demand.
This is with the Autonomous is even more powerful. It is real-time scaling based on that usage at that moment. Built-in automatic increase to meet the workload demands when it spikes and it automatically scales back when it's not needed.
A very powerful capability with all of our Oracle databases, the ability, even with traditional, to allow you to define what you may need with Exadata scaling for peak demands, as well as Autonomous scaling for real-time consumption and scaling when needed.
When you look at all of our options, one of the key things to bear in mind is a phrase that we use: performance scale as more servers are added. And what this is really saying is Oracle's automated scaling ability for the database, it basically has the ability to maintain or improve its performance under increased workload by automatically adding computational resources when needed.
This process is also known as horizontal scaling. It involves adding more servers, compute instances, to a cluster to share the processing load. And it has that capability automatically.
22:53
Nikita: There's so much more we can discuss about Oracle Database@AWS, but let's pause here for today! Thank you so much Susan for joining us.
Lois: Yeah, it's been really great to have you, Susan. If you want to dive deeper into the topics we covered today, go to mylearn.oracle.com and search for the Oracle Database@AWS Architect Professional course. Until next time, this is Lois Houston…
Nikita: And Nikita Abraham, signing off!
23:23
That's all for this episode of the Oracle University Podcast. If you enjoyed listening, please click Subscribe to get all the latest episodes. We'd also love it if you would take a moment to rate and review us on your podcast app. See you again on the next episode of the Oracle University Podcast.
00:00
Welcome to the Oracle University Podcast, the first stop on your cloud journey. During this series of informative podcasts, we'll bring you foundational training on the most popular Oracle technologies. Let's get started!
00:26
Nikita: Welcome to the Oracle University Podcast! I'm Nikita Abraham, Team Lead: Editorial Services with Oracle University, and with me is Lois Houston, Director of Communications and Adoption with Customer Success Services.
Lois: Hi there! Last week, we talked about multicloud and the partnerships Oracle has with Microsoft Azure, Google Cloud, and Amazon Web Services. If you missed that episode, do listen to it as it sets the foundation for today's discussion, which is going to be about Oracle Database@AWS.
00:59
Nikita: That's right. And we're joined by Susan Jang, a Senior Principal OCI Instructor. Susan, thanks for being here. To start us off, what is Oracle Database@AWS?
Susan: Oracle Database@AWS is a service that allows Oracle Exadata infrastructure that is managed by Oracle Cloud Infrastructure, or OCI, to run directly inside an AWS data center.
01:25
Lois: Susan, can you go through the key architecture components and networking relationships involved in this? Susan: The AWS Cloud is the Amazon Web Service. It's a cloud computing platform. The AWS region is a distinct, isolated geographic location with multiple physically separated data center, also known as availability zone. The availability zone is really a physically isolated data center with its own independent power, cooling, and network connectivity.
When we speak of the AWS data center, it's a highly secured, specialized physical facility that houses the computing storage, the compute servers, the storage server, and the networking equipment. The VPC, the Virtual Private Cloud, is a logical, isolated virtual network.
The AWS ODB network is a private user-created network that connects the virtual private cloud network of Amazon resources with an Oracle Cloud Infrastructure Exadata system. This is all within an AWS data center. The AWS-ADB peering is really an established private network connection that's between the Oracle VPC, the Virtual Private Cloud, and the Oracle Database@AWS network. And that would be the ODB.
Within the AWS data center, you have something that you see called the child site. Now, an OCI child site is really a physical data center that is managed by Oracle within the AWS data center. It's a seamless extension of the Oracle Cloud Infrastructure. The site is hosting the Exadata infrastructure that's running the Oracle databases.
The Oracle Database@AWS service brings the power as well as the performance of an Oracle Exadata infrastructure that is managed by Oracle Cloud Infrastructure to run directly in an AWS data center.
03:57
Nikita: So essentially, Oracle Database@AWS lets you to run your mission-critical Oracle data load close to your AWS application, while keeping management simple. Susan, what advantages does Oracle Database@AWS bring to the table?
Susan: Oracle Database@AWS offers a powerful and flexible solution for running Oracle workloads natively within AWS. Oracle Database@AWS streamlines the process of moving your existing Oracle Database to AWS, making migration faster as well as easier.
You get direct, low latency connectivity between your application and Oracle databases, ensuring a high performance for your mission-critical workloads.
Billing, resource management, and operational tasks are unified, allowing you to manage everything through similar tools with reduce complexity. And finally, Oracle Database@AWS is designed to integrate smoothly with your AWS environments' workloads, making it so much easier to build, deploy, and scale your solutions.
05:15
Lois: You mentioned the OCI child site earlier. What part does it play in how Oracle Database@AWS works?
Susan: The OCI child site really gives you the capability to combine the physical proximity and resources of AWS with the logical management and the capability of Oracle Cloud Infrastructure. This integrated approach allows us to enable the ability for you to run and manage your Oracle databases seamlessly in your AWS environment while still leveraging the power of OCI, our Oracle Cloud Infrastructure.
06:03
Did you know that Oracle University offers free courses on Oracle Cloud Infrastructure for subscribers! Whether you're interested in multicloud, databases, networking, security, AI, or machine learning, there's something for everyone. So, what are you waiting for? Pick your topic and get started by visiting mylearn.oracle.com.
06:29
Nikita: Welcome back! Susan, I'm curious about the Exadata infrastructure inside AWS. What does that setup look like?
Susan: The Exadata Infrastructure consists of physical database, as well as storage servers. That is deployed-- the database and the storage servers are interconnected using a high-speed, low-latency network fiber, ensuring optimal performance and reliable data transfer.
Each of the database server runs one or more Virtual Machines, or VMs, as we refer to them, providing flexible compute resources for different workloads. You can create, as well as manage your virtual machine, your VM clusters in this infrastructure using various methods. Your AWS console, Command-Line Interface, CLI, or Application Program Interface, that's your API, giving you various options, several options for automating, as well as integrating your existing tools.
When you're creating your Exadata Infrastructure, there are a few things you need to define and set up. You need to define the total number of your database servers, the total number of your storage server, the model of your Exadata system, as well as the availability zone where all these resources will be deployed.
This architecture delivers a high-performance resiliency and flexible management capability for running your Oracle Database on AWS.
08:18
Lois: Susan, can you explain the network architecture for Oracle Database deployments on AWS?
Susan: The ODB network is an isolated network within the AWS that is designed specifically for Exadata deployments. It includes both the client, as well as the backup subnet, which are essential for securing and efficient database operations.
When you create your Exadata Infrastructure, you need to specify the ODB network as you need the connectivity. This network is mapped directly to the corresponding network in the OCI child site. This will enable seamless communication between AWS, as well as the Oracle Cloud Infrastructure.
The ODB network requires two separate CIDR ranges. And in addition, the client subnet is used for the Exadata VM cluster, providing connectivity for database operations. Well, you do also have another subnet. And that subnet is the backup subnet. And it's used to manage database backups of those VM cluster, ensuring not only data protection, but also data recovery.
Within your AWS region and availability zone, the ODB network contains these dedicated client, as well as backup subnet. It basically isolates the Exadata traffic for both the day-to-day access, and that would be for the client, as well as the backup operations, and that would be for the backup subnet. This network design supports secure, high performance, and connectivity in a reliable backup management of the Oracle Database deployments that is running on AWS.
10:23
Nikita: Since we're on the topic of networking, can you tell us about ODB peering within the Oracle Database architecture?
Susan: The ODB peering establishes a secure private connection between your AWS Virtual Private Cloud, your VPC, then the Oracle Database, the ODB network that contains your Exadata Infrastructure.
This connection makes it possible for application servers that's running in your VPC, such as your Amazon EC2 instances to access your Oracle databases that is being hosted on Exadata within your ODB network. You specify the ODB network when you set up your infrastructure, specifically the Exadata Infrastructure. This network includes dedicated client, as well as backup subnets for an efficient and secure connectivity.
If you wish to enable multiple VPCs to connect to the same ODB network and access the Oracle Database@AWS resources, you can leverage AWS Transit Gateways or even an AWS Cloud WAN for scalable and centralized connectivity.
The virtual private cloud contains your application server, and that's securely paired with the Oracle Database network, creating a seamless, high-performance path to your application to interact with your Oracle Database.
ODB peering simplifies the connectivity between the AWS application environments and the Oracle Exadata Infrastructure, thus supporting a flexible, high performance, and secure database access.
12:23
Lois: Now, before we close, can you compare two key databases that are available with Oracle Database@AWS: Oracle Exadata Database Service and Oracle Autonomous Database Service?
Susan: The Exadata Database Service offers a fully managed and dedicated infrastructure with operational monitoring that is handled by you, the customer. In contrast, the Autonomous Database is fully managed by Oracle, taking care of all the operational monitoring.
Exadata provides very high scalability though resources, such as disk and compute, must be sized manually. Where in the Autonomous Database, it offers high scalability through automatic elastic scaling. When we speak of performance, both service deliver strong results. Exadata offers ultra-low latency and Exadata-level performance, while the Autonomous Database delivers optimal performance with automation.
Both services provide high migration capability. Exadata offers full compatibility and the Autonomous Database includes a robust set of migration tools. When it comes to management, Exadata requires manual management and administration. And that's really in a way to provide you the ability to customize it in the manner you desire, making it meets your very specific business needs, especially your database needs.
In contrast, the Autonomous Database is fully managed by Oracle, including automated administration tasks, optimal self-tuning features to further reduce any management overhead. When we speak of the feature sets, the Exadata delivers a full suite of Oracle features, including the RAC application cluster, or the Real Application Cluster, RAC, whereas the Autonomous offers a complete feature set, but specifically that is designed for optimized Autonomous operations.
Finally, when we speak of integration, integration for both of this service integrates seamlessly with AWS service, such as your EC2, your network, the VPC, your policies, the Identity and Access Management, your IAM, the monitoring with your CloudWatch, and of course, your storage, your SC, ensuring a consistent experience within your AWS ecosystem.
15:21
Nikita: So, you could say that the Exadata Database Service is better for customers who want dedicated infrastructure with granular control, while the Autonomous Database is built for customers who want a fully automated experience. Thank you, Susan, for taking the time to talk to us about Oracle Database@AWS.
Lois: That's all we have for today. If you want to learn more about the topics we discussed, head over to mylearn.oracle.com and search for the Oracle Database@AWS Architect Professional course. In our next episode, we'll find out how to get started with the Oracle Database@AWS service. Until then, this is Lois Houston…
Nikita: And Nikita Abraham, signing off!
16:06
That's all for this episode of the Oracle University Podcast. If you enjoyed listening, please click Subscribe to get all the latest episodes. We'd also love it if you would take a moment to rate and review us on your podcast app. See you again on the next episode of the Oracle University Podcast.
00:00
Welcome to the Oracle University Podcast, the first stop on your cloud journey. During this series of informative podcasts, we'll bring you foundational training on the most popular Oracle technologies. Let's get started!
00:26
Lois: Hello and welcome to the Oracle University Podcast! I'm Lois Houston, Director of Communications and Adoption with Customer Success Services, and with me is Nikita Abraham, Team Lead: Editorial Services.
Nikita: Hi everyone! We're kicking off a new season of the podcast today, this time on Oracle Database@AWS. But before we fully dive into that, we've got Sergio Castro with us to introduce multicloud and talk about some of its use cases. Sergio, who you may have heard on the podcast before, is a Senior Principal OCI Instructor with Oracle University.
01:02
Lois: Hi Sergio! Thanks for joining us today. We've spoken a lot about multicloud before, but we couldn't possibly discuss Oracle Database@AWS without another quick intro to multicloud. So, for anyone who doesn't already know, what is multicloud? And could you also talk about what Oracle is doing in this space?
Sergio: It is the use of several Cloud providers to deliver an IT service.
Basically, a multi-cloud strategy allows organizations to distribute their workloads across multiple Cloud platforms and providers. This will help aiding the flexibility when picking the right tool for each job.
Basically, by selecting the best Cloud Service, IT architects can take advantage of each provider's strengths, including custom hardware, software, and service capabilities. And Oracle is a pioneer in multi-cloud.
We have partnerships with Azure, Google Cloud, AWS, and we've been doing multi-cloud since 2019, including Oracle Interconnect for Azure and Oracle Interconnect for Google Cloud.
Our multi-cloud products is the Oracle Database Service at Azure, at Google Cloud, and at AWS. Here we have our database inside the data centers of these Cloud Service providers. And multi-cloud can be complemented by resources that you have on-premises, providing you with a hybrid Cloud model.
And our public Cloud offerings are not limited to the commercial realm. Multi-cloud is beginning to be available also in the government realm. You can now find Oracle Interconnect for Azure in the US government realm.
We also have government realm offerings in the UK and in the European Union. And of course, dedicated Cloud. If you're going to be involving on-premises, you can also have all the Oracle Cloud Infrastructure resources behind your firewall, behind your routers with dedicated Cloud.
So the offers from Oracle Cloud Infrastructure are really exceptional. It offers you great flexibility and choice. And the choice is yours. You select the platform for your Oracle Cloud solutions.
03:39
Nikita: You've already mentioned a few of them, but could you talk about the various benefits of multicloud?
Sergio: A solid multi-cloud approach enables organizations to leverage the unique strengths and offerings of various Cloud service providers. By not being limited to a single vendor's capabilities or policies, businesses can adapt quickly to changing environments, deploy workloads where they fit best, and rapidly integrate new solutions as market demands evolve.
Relying on a single Cloud vendor can make it challenging and costly to migrate workloads or switch providers if businesses needs change. Multi-cloud strategies mitigate this risk by distributing applications and data across multiple platforms, making technology transition smoother and giving organizations greater bargaining power.
Now, diminishing single points of failure at the Cloud service provider level is great, because distributing systems and data across multiple clouds can definitely reduce dependence on a single provider or region.
This increased geographic diversity improves resilience and provides a more robust backup and recovery option, helping to ensure business continuity in the event of a disaster or even an outage. With access to a range of pricing models and service levels from different providers, organizations can allocate workloads based on cost effectiveness.
This best fit approach encourages cost savings by enabling the selection of the most economical provider for each workload. And this facilitates continuous cost optimization efforts. For example, OCI provides significantly lower data egress charges, this in comparison to our competitors.
Multicloud management empowers organizations to place their workloads in the environments where they perform the best. By distributing workloads based on latency, processing power, or data proximity, businesses can realize performance improvements and achieve higher availability for their critical services.
Now regarding best of breed, each Cloud provider brings unique innovations and specialized services to the market. With a multi-cloud approach, organizations can tailor solutions to meet specific business needs.
Operating across multiple Cloud platforms means access to a wider array of data centers worldwide. This extended reach supports expansion into new markets, improves local performance for users, and helps satisfy data sovereignty requirements in diverse jurisdictions. And speaking about jurisdictions, this flexibility helps meet industry standards and regional data protection laws more effectively.
06:50
Nikita: You mentioned that Oracle's multicloud journey started in 2019 with Azure. What was that early phase like?
Sergio: The Oracle Cloud Infrastructure multi-cloud offering started with the Oracle Interconnect for Microsoft Azure, where we connect FastConnect, our digital circuit, to the equivalent Express Route, the digital circuit of Microsoft Azure.
Basically FastConnect, it is used typically for extending the OCI services into on-premises. In this case, it is extending these services into another Cloud Service provider, Microsoft Azure or various applications.
07:29
Lois: And then we moved on to Oracle Database Service for Azure, right?
Sergio: It's very similar to what we have right now, the Oracle Database Service at Azure, except that back then, the interface was on OCI.
Basically on OCI, we had a console that resembled Azure, but all the services were still running on OCI. Now, the difference with Oracle Database Service at Azure is that we extended Oracle Cloud Infrastructure into the Azure data centers.
So Oracle Database at Azure is a child site in the Microsoft Azure data centers. Basically we are placing our hardware in Azure data centers. And this gives us a very good latency, sub-one millisecond latency.
08:24
Lois: What about Oracle's multicloud services with Google and Amazon Web Services?
Sergio: Oracle Interconnect org and Oracle Database app are available for Google Cloud. We do have a service called Oracle Interconnect or Google Cloud, similar to the Azure one.
And we also have the Oracle Database inside the Google Cloud data centers operating as a child site. And back in 2024 during Oracle Cloud World, we announced Oracle Database@AWS.
This product is now available in two AWS regions. In a similar way, we have the Oracle Database inside the AWS data center with sub-one millisecond latency. We are currently in two data centers, but we have brought plans for being available in over 20 plan regions between Oracle Cloud and Amazon Web Services.
09:32
Nikita: Sergio, how do the capabilities of Oracle Database multicloud help enterprises modernize?
Sergio: Oracle Database multi-cloud capabilities help enterprise modernize, adopting a Gen AI strategy, obviously, using the Oracle database to bring Oracle's powerful AI to business data. When you move to multi-cloud environments, you have a playground for you to test and run your workloads and then go into productions with your choice of services on the Oracle Exadata.
And reducing risk, it's very easy to move to cloud and gain Oracle maximum availability architecture benefits. And by moving into a multi-cloud environment, you guarantee that you're going to be lowering your cost because you're going to be selecting the best of breed of the services that the Cloud Service provider can offer.
Now, with the Oracle Database on multi-cloud environments, you're able to port your Oracle Database knowledge that you have from on-premises to a single cloud provider to a multi-cloud environment. It is the same solution, the same Oracle Database capabilities available everywhere-- on-premises, on your private cloud, on a single cloud provider, or on a multi-cloud environment.
Having the same capabilities make it very easy to migrate from on-premises or to migrate from one cloud service provider to the other. Oracle Database multi-cloud solutions really offer the best of both worlds. So a choice of services directly from hyperscaler marketplace and the vendor's cloud portal.
11:21
Lois: And when you say "hyperscalers," who exactly are you referring to?
Sergio: These hyperscalers, we're talking about OCI, we're talking about Azure, we're talking about Google cloud, we're talking about AWS. Having the Oracle Database inside the Cloud data centers, regardless of who the hyperscaler provider is, guarantees low latency from your application into your database.
But Oracle Database is not the only product. We also offer Oracle Interconnect for Azure and GCP. So if you want to go beyond Oracle Database@Cloud Service provider, or if you're looking to going into a region where the service is not available yet, you can leverage the Oracle Interconnect for Azure or Google Cloud platform.
Basically, this service interconnects the Cloud Service providers. We have a partnership and selected regions where we interconnect with either Azure or Google Cloud platform.
12:25
Are you working toward an Oracle Certification? Join one of our live certification prep events! Get insider tips from seasoned experts and connect with others on the same path. Visit mylearn.oracle.com and kick off your certification journey today!
12:45
Nikita: Welcome back! Sergio, could you tell us about some key Oracle Database multicloud use cases?
Sergio: Move to cloud. Lift and shift from on-premises to Cloud. Lift and shift from one Cloud Service provider to the other, and consolidate your database on Exadata.
This will guarantee all the tools that you need for building innovative applications, bringing artificial intelligence to your business data, on the Oracle powerful AI suite, and combine Database AI with hyperscaler services and frameworks. Remember, the best of breed from the Cloud Service provider of your choice.
And this will allow you to reduce complexity and cost. Now according to knowledge is not the only thing. You can also lift and ship without refactoring your data, reducing migration times, complexity, and costs with the Oracle Database Exadata and maximum availability architecture.
13:47
Nikita: What are the key differentiators and benefits of moving Oracle Database workloads to the cloud?
Sergio: Extreme performance. Accelerate your database workloads with scalability, scale infrastructure, and consumption, and extreme cost optimization. But that's not all.
You also get extreme availability with the Oracle maximum availability architecture, extreme resiliency, making sure that you're always running with high availability and disaster recovery protection and extreme simplicity. So you can use all your Oracle Database and Exadata capabilities.
Build innovative applications with Cloud-First capabilities. These are Cloud native capabilities that are going to enable you to innovate for all your applications. And having a unified multi-cloud environment reduce complexity and cost because you can leverage your Exadata infrastructure with share licenses, low administration with database lifecycle automation, and purchase through your hyperscaler marketplace.
So you can only have one vendor running all billing, even if you're leveraging multi-cloud solutions. And you can leverage your Oracle investments with bring-your-own-license and earn up to 33% towards Oracle tech license.
Reduce administration by up to 65% with the Autonomous self-driving database. Only pay consumption for actual usage with online scaling, Autonomous Database, elastic pools, and per second billing. And enjoy advanced features at no added cost, like using the built-in AI vector search.
15:31
Lois: Can you give us a real-world example of a company using Oracle Database@AWS?
Sergio: Fidelity Investments rely on Oracle Database@AWS. They were one of the very first customers to leverage the best of both worlds, in this case, the offering from the AWS hyperscale applications and the Oracle Database Exadata Cloud service inside AWS.
Specifically, Fidelity uses this integration to make it easier to move some of its database workloads to AWS, combining the reliability and security of AWS with the critical enterprise software provided by Oracle.
16:17
Lois: Thank you, Sergio, for joining us on the podcast! To learn more about what we discussed today, head over to mylearn.oracle.com and search for the Oracle Database@AWS Architect Professional course. Join us next week when we dive deep into what Oracle Database@AWS is all about. Until then, this is Lois Houston…
Nikita: And Nikita Abraham, signing off!
16:43
That's all for this episode of the Oracle University Podcast. If you enjoyed listening, please click Subscribe to get all the latest episodes. We'd also love it if you would take a moment to rate and review us on your podcast app. See you again on the next episode of the Oracle University Podcast.
00:00
Welcome to the Oracle University Podcast, the first stop on your cloud journey. During this series of informative podcasts, we'll bring you foundational training on the most popular Oracle technologies. Let's get started!
00:26
Lois: Welcome to the Oracle University Podcast. I'm your host, Lois Houston, and I'm joined today by Jeffrey Malcolm, Operating Adviser working in the private equity space, to talk about how Oracle AI certifications have impacted his professional and personal life. Hi Jeffrey, thank you so much for taking the time to chat with us today. Our conversation actually stems from a fascinating discussion we had at AI World, Oracle's annual user conference. There you shared your journey to becoming Oracle AI certified... How that process not only shifted your perspective on emerging technologies, but also influenced the way you work, interact with colleagues and clients, and even how you encourage continued learning in your own family. I'm really excited to dive deeper into your story and explore the value and real world benefits of certification in today's AI-driven landscape.
01:20
Jeffrey: Uh Lois, first of all, thank you for having me. Um, it was fantastic running into your teammates at AI World. It was amazing. You know, for for me, you know, as we go through this AI journey with my portfolio companies, I'm constantly looking at what are the new things out there? How can I get myself enabled? So, excited that we're having this conversation today.
01:42
Lois: That's great. So, let's start at the beginning. Before your certifications, what was your initial reaction when you heard about Oracle's OCI and AI certification programs? Were you immediately interested or was there hesitation?
Jeffrey: I was skeptical. You know, I was skeptical about OCI capabilities as you guys didn't have much market penetration at the time. You know, in my technology career, I built several enterprise applications on AWS, Azure, and GCP. However, OCI Cloud was new and my wife Kay Malcolm, who you know, kept raving at home over and over about OCI, that the cloud was faster, it was more secure and cost friendly. All of which this thing that I'm hearing are appealing to me as a CIO because that's something that I need to control at my companies that I'm working with.
Lois: Right.
Jeffrey: So because even though I was skeptical I was like if all of these things are appealing to her, I'm going to go ahead, I'm going to take the certification, I'm going to confirm all of these allegations that she's making to just make sure that, you know, it's actually true. And I was pleasantly surprised once I pulled the covers back.
02:59
Lois: So, you mentioned that your wife actually encouraged you to sign up for the free OCI Foundations training. Can you tell me a little bit more about that experience and how it influenced your decision to continue learning?
Jeffrey: When she took the OCI test, at first she passed with a 95% score. So, you know, that encouraged me to just, you know, to take it as as as informative as I can. And to be honest, I wanted to beat her score because, you know, we're competitive. Um, upon passing and seeing the high quality of the candidate, you know, of the content. Uh, it was just hard for me to keep this internally. I wanted to share it with my network. I wanted to kind of see if there's others that could benefit from it. But you know my my initial piece was how can I beat her? And when I was able to date the score I I did score a 96 and beat her and I started sharing it with my network. And what happened Lois it was amazing. You know we we found a a cohort of individuals right around 50 who wanted to start taking the similar course. We were like hey this is something that's amazing. We had individuals who were teachers. We had individuals who had work in the corrections facility. We had plumbers. We had electrician. And they were all skeptical about taking this highly technical course. But we said, "Hey, it's self-paced. It's something that you can do and you can really benefit your career." So at the end, we had 50 people who took it. Of the 50, we had 30 brave souls who went ahead and took the certification. Um, and of the 30, we had a 24 people who passed. That's almost a 90% pass rate.
Lois: Yeah.
Jeffrey: And it was so successful, we actually had one individual who shared their news. He was able to get a new position where he became a technical project manager and 3x his salary. So, it was just amazing to watch how people were brave enough to take this content, how OCI did an amazing job of making it self-paced and absorbable and then people got the certification, we published it on LinkedIn, and people actually got jobs. So, it was actually quite quite impressive.
05:24
Lois: That's an incredible story. So, you didn't just become a believer, you actually went and built an application on OCI, right? What was the project and how did your new skills play a role in making that happen?
Jeffrey: That's that's a funny story. So at the time I was doing the uh the OCI training. I was building a mobile native application for a startup who was at the time looking to impact climate change. They were socially conscious enterprise dedicated to bring human-centered tools to individuals to live a better life and protect our environment. You know, the the main focus was how can they create an application that had no ads, only information, and provide a tool that would allow people to do joyful actions such as recycling, such as, you know, um looking at how you can lower your power consumption in your home, moving from plastics away from your home and just not consuming that much plastic. So we really wanted to gamify that and build an application that could do that. Uh my training gave me the confidence that as I was architecting the solution to say I needed to build something scalable and secure and full transparency at the time my myself and the rest of my development team was looking at completely AWS solutions.
From this training I was like no if we really want something secure and scalable, the Oracle Database specifically Autonomous Database is it and we switched we built a multicloud solution across Azure um AWS and um GCP as well as OCI OCI had our backend and we built our application to leverage it specifically because after taking a training I was convinced that the backend needed to on Oracle Database specifically Autonomous Database. So it helped the the application had been running now for 3 years no issues um from a scalability standpoint and it's been fantastic for us.
07:34
Lois: Well that's great. That's a great story to uh to talk about how you leveraged your training and into something that actually made a difference in your job. So let's talk a little bit about your AI certification. You've described the AI foundations training that you took from Oracle University as demystifying. So tell me about some of the biggest takeaways for you. How did it shift your understanding of what AI really is and how it can be used?
Jeffrey: That's a great point. Um you know in the last two three years AI has just been the talk of the town and specifically in my role as an advisor to private equity companies, I'm constantly being asked how can AI impact the top line? How can AI the bottom line and help us realize the multiple or investment pieces to exit um our our different companies? My background whenever I look at a problem I need to understand the guts of it and at the time there was all of these myths and and and confusion and scared to be honest around AI. So coming from an engineering background at MIT, one of the things MIT taught me is I need to look under the covers to truly understand something from a technology standpoint. Do my due diligence before sharing best practices with my portfolio companies that I'm working with. So that made me take on this challenge to say hey I need to understand what's the difference between machine learning, deep learning. What are the different you know kind of you know neural networks out there? When do you want to use it? So the AI foundation training that Oracle was offering was compelling to me to the point that I had had great success on the OCI's piece I'm like let me take this on. So that's what really started my journey back in January of 2023 um this was just a few months after the release of ChatGPT and I really wanted to understand how AI can like skyrocket and help our companies you know drive drive value. So that's what made me take it on. I wanted to understand what's the difference between RNN you know recurrent neural networks convolutional um neural networks and what's the best business case that our companies can use? What's the best time to use a vector database? Why is it important? Why is it needed for AI solution? I wanted to be able to articulate the difference between a RAG and Agentic AI workflow to our companies so that's really was the impass of as to why I wanted to take on this piece and why I wanted to do uh the AI foundational training.
10:08
Lois: And your journey didn't stop with you and Kay, right? Your sons are both Oracle AI-certified as well as I understand it. So, tell me a little bit about that. What inspired them?
Jeffrey: So our poor boys um you know we have two boys you know both are in college uh you know and one full transparency is a computer science major at at Georgia Tech. The other one is doing a biology major at um Kennesaw State. In our household, we believe in technology and and we believe anyone can look at it. So, after getting a better understanding of AI and realizing AI is really going to impact every aspect of our our society and our industry, we said we should absolutely have our boys do this. Well, of course, with any kind of young kids, they're going to be hesitant. So um we we had to really incentivize them you know for you know for my for our youngest you know who was not you know been exposed to this technology, he was starting his new business and he wanted to learn and for our oldest being at Georgia Tech he was in that computer science major this was going to help him secure some summer internship. So what we did was to incentivize them we had to turn off the Wi-Fi and so the Wi-Fi could only be on if they were doing the certification and and full transparency after I would say a weekend and like 3 days they were able to complete the course and truly um pass and understand on a foundational level like what's the difference between RAG and Agents? What's the difference between you know RNN and CNN? What are neural networks and what's deep learning the machine learning? For my oldest, who was in computer science, it helped him secure a summer internship because he was able to talk about in a very clear way that he understood AI. And then he was also able to show his um his certification and that helped him to secure an internship with Oracle on the OCI team being a software developer. And to be honest, he's going into his third summer where he's going to be at Oracle um coming this next summer in 2026. So, it's been beneficial. I tell people like this is something that you should absolutely do and um we encourage our friends and we tell the story about our boys because it's it's personal. We show that anyone can do it.
12:35
Lois: That's that's an awesome story. And the whole family is AI certified. That's great. So, you mentioned that you've been sharing your experience with your friends and your colleagues and neighbors. What are some of the common misconceptions or fears that you encounter when you're talking about AI with people? How do you help them understand what it means for their careers and for their lives?
Jeffrey: Um, no, it's a great question. You know, a lot of people I talk to still think AI is either going to replace them or that it's too technical for them to ever understand.
Lois: Right.
Jeffrey: And the fear usually comes from not knowing where to start. Um, I tell them that AI is really just a tool and and and learning the basics helps you to see where it fits into your work life. And and once they understand that it's it's here to help, not to replace them, the conversation shifts and become, oh, okay, now how can I become more knowledgeable so I can be less fearful and identify opportunities? So really, I've been having conversation to say, look, it is not something that's here to replace you. It is a tool and it's a tool that really once you understand how you can use it at your job or in your school work or in where you volunteer, it can really drive automation and speed and allow you to do your job much better.
Lois: Yeah, that's so true. And the knowledge understanding is so powerful. It really does change people's perspective from being fearful to being excited about the possibilities with AI.
14:13
Be a part of something big by joining the Oracle University Learning Community! Connect with over 3 million members, including Oracle experts and fellow learners. Engage in topical forums, share your knowledge, and celebrate your achievements together. Discover the community today at mylearn.oracle.com.
14:34
Lois: So tell me a little bit about uh how in your private equity work um I know you interact with a wide variety of clients. How does this knowledge about Oracle's AI uh technology and having the certification empower you to have conversations and build trust with your clients?
Jeffrey: The biggest value I've received from getting the Oracle AI certification is that it gives me clear and practical foundations for talking to people about what AI is and what it's not. Let's be honest, there's a lot of hype out there about AI and there's a lot of hype and fear that is unproven. You know, in in my work with private equity, clients want to know what's the real, what's possible, what's worth our investment. You know is this something that we should really look at. So when I can explain AI concepts, agentic workflow, you know, neural networks and one is important, you know, what neural networks are better for vision capabilities, what neural networks are better for audio capabilities, what neural networks are just better for for text. Right? When I can really go down to those simple terms and connect with them on the operating challenges that that companies is facing, then I have tangible case studies that I can help work with my companies on that will build credibility and this hype and fear kind of starts to subside and go away.
So with that, you know, when when when working with my private equity companies, I don't want to just do something just because it's the hype. We we really need to make sure that whatever we doing can drive growth and drive IBIDA growth so that we could realize our investment thesis. So this certification really helped me to just ground it in the ways that I could have real conversations with our companies about what are the activities that are going to drive growth, what are the activities that's going to be efficient, what are the activities that are going to have value creation for our company. and it's been something that you know has really been helpful.
So, another thing I wanted to share is Kay and I have been working with not only, you know, digging it to enterprises, but I want to take it to universities and we've been working with her mother's alma mater, Alabama State, which is a historically black college and university, to help them get on Oracle AI and then get their foundation going because we want to take this down to the college level and help to drive this and offer it. Through that interaction, they've reached out to the city of uh Montgomery and they want to work with the public schools to start getting the school system to start becoming AI foundation um certified and understand how AI can evolve in everything that you do. So, we've been working with them. We actually had a quick event here that Oracle did um at here in Atlanta and they were able to attend and see some of the application and we're hoping to just continue this. So it it's not something that I'm just talking to my private equity companies about. I'm also want to bring this into universities, bring this into the school because it's a fundamentally different way to solve problems and anyone can do it. You don't have to have a technical background. We're at a foundationally different level where anyone can start their AI journey.
18:05
Lois: Right. And we're just at the beginning of this transformation of the industry. It's a great way to teach the next generation how to be prepared so they can have uh you know great careers and leveraging AI. So, one of the things you've mentioned to me when we've talked in the past is that you boil down AI to two things, data and math, right? Not innovation itself but a tool. So can you elaborate a little bit on that?
Jeffrey: Yeah, it's one of the the things I like to say. I think if people talk to me and they say, you know, Jeff always boils it down. So, you know, when I look at it, generative AI foundation is based on the concept of machine learning and deep learning.
Lois: Right.
Jeffrey: Um both concepts are based on linear algebra, calculus, probability, statistics, optimization theory. You know those are some of the the the foundation of both of those. LLMs use these foundations and data to generate content and execute tasks. So people's actions in system generate the data that these LLMs use and and math follows specific patterns such as Bayer's theorem, Pythagorean theorem. The innovation that comes from those because you have math in terms of the machine learning and you have data requires thinking out of the box and not following one of these pattern, which is only accomplished through people and our unique experience. So when I think of generative AI that's why I see it as a tool. You're always going to require human interaction to drive an outcome.
Lois: Right.
Jeffrey: It it is a combination of math and data. Our unique experience of how we engage and how we look at a problem brings innovation to a challenge. So that's one of the things I always say it's I boils it down to it's math and data. Innovation comes from people. And the reason why it comes from people is we all have unique experiences, unique backgrounds. So we look at a problem differently in terms of how we solve it and that difference is what drives the innovation.
Lois: Right. And just leverages AI to do so.
Jeffrey: Correct.
20:20
Lois: So you've said that AI levels the playing field. What does that mean to you in practical terms and how have you seen it make an impact in your area of expertise?
Jeffrey: When I say level the playing ground, what I mean is there's a unique opportunity where this technology is impacting every industry that we know. Prior to this, you know, if there was a technology solution such as, let's look at the big ones, cloud, everyone moving to the cloud, it required you to have some knowledge of cloud technology. Big data it required you to have some knowledge of data solutions. AI is so transformational that you know if we look take a look at vibe coding that's out there. Your ability to think about a problem and break it down in a in a tangible way and build an app and leverage vibe coding where the LLM can actually do the hard work for you is transformational. It doesn't require you to have that knowledge to drive it. Now to take some and to and and that what what does that do? That allows you to quickly take a business idea from concept all the way to an MVP and then you can then move that into production and and and start making money on whatever that idea is.
Does that take you 100% away? No. You're still going to need someone to run it and all of that. But what what I love about it is a lot of individuals have many different ideas and many different concepts. You can now quickly materialize those into a technology solution without having to have a technology background because the hard work of executing that code can be handled by an LLM. That's just one example if we just talk about coding. If you look at other industries such as the legal industry that is doing a lot of stuff around um just looking at how can you quickly process documents and read those, it's really revolutional. So what what I mean by it being transformational, it enhances each industry differently. So therefore, it's not that you have to have a technology background. If you're willing to take it on and look at it as a tool, then we are all at the beginning stage. And to be honest, I'll go as far as saying, Lois, if you don't have a technical background, you're actually at an advantage because you don't have to unlearn some of the activities that you used to solve problem with. You actually can come up with new ways leveraging AI agentic workflow to solve those problems quicker. So that's why I really feel like we are at a level a level playing field and it's a transformational piece and I'm encouraging as many people to just start becoming familiar with the different tools that are out there. Get you yourself a ChatGPT account, start working with Anthropic Claude, get yourself a Gemini account, start working with their notebook LLMs to generate, you know, um, infographics. It's amazing. And that's the new thing that I'm playing with right now. Start using these tools because what's happening is as you understand them, your creativity is going to say, "Oh, I can now do this." Uh, mark my word. I think this is going to be one of the pivotal era that we look back and say, "If I had taken full advantage of AI when it came out, I would have started this many businesses." And I don't want people to have that regret. So that's why I think you know dismiss the fear. You do not have to have a technology background to start AI. You can do that now. You can take your business ideas from concept to MVP, sell it to investors to get an investment to take it to production, and hopefully make the winnings that you want with your ideas. So I'm I'm I'm super excited about where we are as a society because I think this is a huge opportunity.
Lois: Yeah, I agree with you. I think we're we're witnessing a transformation uh revolution in in so many different ways and the cross industry applications are just you know mind-blowing.
Jeffrey: Yeah.
24:36
Lois: So for somebody who might be intimidated about pursuing an AI or OCI certification you just mentioned how you would encourage them you know to get started anyway. What advice would you offer? How would you recommend that they get started?
Jeffrey: So first of all I would say go to Oracle University.
Lois: Thank you.
Jeffrey: You know I check out their courses. You know the thing that I would say that I like about um the courses there is it's self-paced. It's easily easy to absorb and then it goes deep into whatever topic you want. So, it starts off very high level to give you the background of what you need, but it goes really deep if there's something that you want to go in on. That's that's the first thing. The other piece that I love about it is the courses not only just have talking points, but they have hands-on labs that you can actually put to action the content that you just learned. So one of those hands-on lab with the lab is based on Oracle Live Labs and a little plug for my wife. Oracle Live Labs was created by Kay. I remember when she was here at home building this almost three four five years ago and it's amazing to see the coursework that they have. They have so many different hands-on labs that they can do. So, I would say because of the combination of this great structured content, the ability to then have the hands-on lab through Live Lab that you can then put into action the things that you you you've learned, then it's a quick and tangible way to just receive content and actually test it out. And, you know, to watch Live Labs grow, to see where it is. I'm just I'm I'm excited for her. I'm proud. I know it's one of her her passion. She always says it's it's her her gift to developers is Live Labs because as an engineer myself I can't just hear something and learn it. I have to put it to action. So I think that combination of Oracle University having the content and then having mechanisms like Live Lab to do hands-on is why people should go there and start and then some of the courses you guys have they're free.
Lois: Absolutely.
Jeffrey: I wouldn't do that. So if they're free, like let me go ahead and start it now and then as I go up, you know, even if there's a charge, like there's a benefit. So you guys have offered such a low entry um um hurdle to start that I don't see why you wouldn't just start there.
Lois: And all of our OCI training is free as well as the foundations associate certification. So you're right, there's there's no barrier to entry for sure.
Jeffrey: Mhm.
27:13
Lois: Well, Jeffrey, I want to thank you so much for sharing your journey with me today. Your enthusiasm, your experience, and your expertise has just really been inspiring and um I've just been really happy to hear about how this has not only impacted your career, but also your outlook on the industry and um influence the people around you. So, thank you again. I really appreciate it.
Jeffrey: Anytime. I'm excited that I was able to share my journey and I hope everyone, you know, starts their own. So excited. Thank you.
Lois: Thank you.
27:54
That's all for this episode of the Oracle University Podcast. If you enjoyed listening, please click Subscribe to get all the latest episodes. We'd also love it if you would take a moment to rate and review us on your podcast app. See you again on the next episode of the Oracle University Podcast.
00:00
Welcome to the Oracle University Podcast, the first stop on your cloud journey. During this series of informative podcasts, we'll bring you foundational training on the most popular Oracle technologies. Let's get started!
00:26
Lois: Hello and welcome to the Oracle University Podcast! I'm Lois Houston, Director of Communications and Adoption with Customer Success Services, and with me is Nikita Abraham, Team Lead: Editorial Services with Oracle University.
Nikita: Hi everyone! In our last episode, we started the conversation around the real business value of Oracle Cloud Infrastructure and how it helps organizations create impact at scale.
Lois: Today, we're taking a closer look at what keeps the value strong — things like security, compliance, and the technology that helps businesses stay resilient. To walk us through it, we have our experts from Oracle University, David Mills, Senior Principal PaaS Instructor, and Tijo Thomas, Principal OCI Instructor.
01:12
Nikita: Hi David and Tijo! It's great to have you both here! Tijo, let's start with you. How does Oracle Cloud Infrastructure help organizations stay secure?
Tijo: OCI uses a security first approach to protect customer workloads. This is done with implementing a Zero Trust Model. A Zero Trust security model use frequent user authentication and authorization to protect assets while continuously monitoring for potential breaches. This would assume that no users, no devices, no applications are universally trusted. Continuous verification is always required. Access is granted only based on the context of request, the level of trust, and the sensitivity of that asset.
There are three strategic pillars that Oracle security first approach is built on. The first one is being automated. With automation, the business doesn't have to rely on any manual work to stay secure. Threat detection, patching, and compliance checks, all these happen automatically. And that reduces human errors and also saving time. Security in OCI is always turned on. Encryption is automatic. Identity checks are continuous.
Security is not an afterthought in OCI. It is incorporated into every single layer. Now, while we talk about Oracle's security first approach, remember security is a shared responsibility, and what that means while Oracle handles the data center, the hardware, the infrastructure, software, consumers are responsible for securing their apps, configurations and the data.
03:06
Lois: Tijo, let's discuss this with an example. Imagine an online store called MuShop. They're a fast-growing business selling cat products. Can you walk us through how a business like this can enhance its end-to-end security and compliance with OCI?
Tijo: First of all, focusing on securing web servers. These servers host the web portal where customers would browse, they log in, and place their orders. So these web servers are a prime target for attackers. To protect these entry points, MuShop deployed a service called OCI Web Application Firewall.
On top of that, the MuShop business have also used OCI security list and network security groups that will control their traffic flow. As when the businesses grow, new users such as developers, operations, finance, staff would all need to be onboarded. OCI identity services is used to assign roles, for example, giving developers access to only the dev instances, and finance would access just the billing dashboards.
MuShop also require MFA multi-factor authentication, and that use both password and a time-based authentication code to verify their identities. Talking about some of the critical customer data like emails, addresses, and the payment info, this data is stored in databases and storage. Using OCI Vault, the data is encrypted with customer managed keys. Oracle Data Safe is another service, and that is used to audit who has got access to sensitive tables, and also mask real customer data in non-production environments.
04:59
Nikita: Once those systems are in place, how can MuShop use OCI tools to detect and respond to threats quickly?
Tijo: For that, MuShop used a service called OCI Cloud Guard. Think of it like a security operation center, and which is built right into OCI. It monitors the entire OCI environment continuously, and it can track identity activities, storage settings, network configurations and much more. If it finds something risky, like a publicly exposed object storage bucket, or maybe a user having a broad access to that environment, it raises a security finding. And better yet, it can automatically respond.
So if someone creates a resource outside of their policy, OCI Cloud Guard can disable it.
05:48
Lois: And what about preventing misconfigurations? How does OCI make that easier while keeping operations secure?
Tijo: OCI Security Zone is another service and that is used to enforce security postures in OCI. The goody zones help you to avoid any accidental misconfigurations. For example, in a security zone, you can choose users not to create a storage bucket that is publicly accessible. To stay ahead of vulnerabilities, MuShop runs OCI vulnerability scanning. They have scheduled to scan weekly to capture any outdated libraries or misconfigurations.
OCI Security Advisor is another service that is used to flag any unused open ports and with recommending stronger access rules. MuShop needed more than just security. They also had to be compliant. OCI's compliance certifications have helped them to meet data privacy and security regulations across different regions and industries. There are additional services like OCI audit logs for traceability that help them pass internal and external audits.
07:11
Oracle University is proud to announce three brand new courses that will help your teams unlock the power of Redwood—the next generation design system. Redwood enhances the user experience, boosts efficiency, and ensures consistency across Oracle Fusion Cloud Applications. Whether you're a functional lead, configuration consultant, administrator, developer, or IT support analyst, these courses will introduce you to the Redwood philosophy and its business impact. They'll also teach you how to use Visual Builder Studio to personalize and extend your Fusion environment. Get started today by visiting mylearn.oracle.com.
07:52
Nikita: Welcome back! We know that OCI treats security as a continuous design principle: automated, always on, and built right into the platform. David, do you have a real-world example of a company that needed to scale rapidly and was able to do so successfully with OCI?
David: In late 2019, Zoom averaged 10 million meeting participants a day. By April 2020, well that number surged to over 300 million as video conferencing became essential for schools, businesses, and families around the world due to the global pandemic.
To meet that explosive demand, Zoom chose OCI not just for performance, but for the ability to scale fast. In just nine hours, OCI engineers helped Zoom move from deployment to live production, handling hundreds of thousands of concurrent meetings immediately. Within weeks, they were supporting millions.
And Zoom didn't just scale, they sustained it. With OCI's next-gen architecture, Zoom avoided the performance bottlenecks common in legacy clouds. They used OCI functions and cloud native services to scale workloads flexibly and securely.
Today, Zoom transfers more than seven petabytes of data per day through Oracle Cloud. That's enough bandwidth to stream HD video continuously for 93 years. And they do it while maintaining high availability, low latency, and enterprise grade security. As articulated by their CEO Erik Yuan, Zoom didn't just meet the moment, they redefined it with OCI behind the scenes.
09:45
Nikita: That's an incredible story about scale and agility. Do you have more examples of companies that turned to OCI to solve complex data or integration challenges?
David: Telecom giant KDDI with over 64 million subscribers, faced a growing data dilemma. Data was everywhere. Survey results, system logs, behavioral analytics, but it was scattered across thousands of sources.
Different tools for different tasks created silos, delays, and rising costs. KDDI needed a single platform to connect it all, and they chose Oracle. They replaced their legacy data systems with a modern data platform built on OCI and Autonomous Database.
Now they can analyze behavior, improve service planning, and make faster, smarter decisions without the data chaos. But KDDI didn't stop there. They built a 300 terabyte data lake and connected all their systems-- custom on-prem apps, SaaS providers like Salesforce, and even multi-cloud infrastructure.
Thanks to Oracle Integration and pre-built adapters, everything works together in real-time, even across clouds. AWS, Azure, and OCI now operate in harmony. The results? Reduced operational costs, faster development cycles, governance and API access improved across the board.
KDDI can now analyze customer behavior to improve services like where to expand their 5G network.
Next up, 8 by 8 powers communication for over 55,000 companies and 160 countries with more than 3 million users, depending on its voice, video, and messaging tools every day.
To maintain that scale, they needed a cloud that could deliver low latency global availability and high performance without blowing up costs. Well, they moved their video meeting services from Amazon to OCI and went live in just four days.
The results? 25% increase in performance per node, 80% reduction in network egress costs, and a significantly lower overall infrastructure spend. But this wasn't just a lift and shift. 8 by 8 also replaced legacy tools with Oracle Logging Analytics, giving their teams a single view across apps, infrastructure, and regions.
8 by 8 scaled up fast. They migrated core voice services, deployed over 300 microservices using OCI Kubernetes, and now run over 1,700 nodes across 26 global OCI regions. In addition, OCI's Ampere-based virtual machines gave them a major boost, sustaining 80% CPU utilization and more than 30% increased performance per core and with no degradation.
And with OCI's Observability and Management platform, they gained real-time visibility into application health across both on-prem and cloud. Bottom line, 8x8 represents yet another excellent example of a company leveraging OCI for maximum business results.
13:24
Lois: Uber handles more than a million trips per hour, and Oracle Cloud Infrastructure is an integral part of making that possible. Can you walk us through how OCI supports Uber's needs?
David: Uber, the world's largest on-demand mobility platform, handles over 1 million trips every hour. And behind the scenes, OCI is helping to make that possible.
In 2023, Uber began migrating thousands of microservices, data platforms, and AI models to OCI. Why? Because OCI provides the automation, flexibility, and infrastructure scale needed to support Uber's explosive growth.
Today, Uber uses OCI Compute to handle massive trips serving traffic and OCI Object Storage to replace one of the largest Hadoop-based data environments in the industry. They needed global reach and multi-cloud compatibility, and OCI delivered.
But it's not just scale, it's intelligence. Uber runs dozens of AI models on OCI to support real-time predictions up 14 million per second. From ride pricing to traffic patterns, this AI layer powers every trip behind the scenes.
And by shifting stateless workloads to OCI Ampere ARM Compute servers, Uber reduced cost while increasing CPU efficiency. For AI inferencing, Uber uses OCI's AI infrastructure to strike the perfect balance between speed, throughput, and cost. So the next time you use your Uber app to schedule a ride, consider what happens behind the scenes with OCI.
15:18
Lois: That's so impressive! Thank you, David, for those wonderful stories, and Tijo for all of your insights. Whether you're in strategy, finance, or transformation, we hope you're walking away with a clearer view of the business value OCI can bring.
Nikita: Yeah, and if you want to learn more about the topics we discussed today, visit mylearn.oracle.com and search for the Cloud Business Jumpstart course. Until next time, this is Nikita Abraham…
Lois: And Lois Houston signing off!
15:48
That's all for this episode of the Oracle University Podcast. If you enjoyed listening, please click Subscribe to get all the latest episodes. We'd also love it if you would take a moment to rate and review us on your podcast app. See you again on the next episode of the Oracle University Podcast.
From the publisher's feed

43,345 Listeners

7,608 Listeners

967 Listeners

4,351 Listeners

1,982 Listeners

96 Listeners

29,187 Listeners

97 Listeners

683 Listeners

54 Listeners

1,448 Listeners